[ 
https://issues.apache.org/jira/browse/FOP-3168?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17823806#comment-17823806
 ] 

Joshua Marquart commented on FOP-3168:
--------------------------------------

I have pointed this out elsewhere.

Apache Xalan has bug XALAN-J-2591, which removes XML attributes on 
transformation when FEATURE_SECURE_PROCESSING is applied.

Servicemix Xalan 2.7.3_3 is the only build that remediates the bug.  They did 
not include the fix in prior main Xalan releases.

> Add secure processing for XSL input
> -----------------------------------
>
>                 Key: FOP-3168
>                 URL: https://issues.apache.org/jira/browse/FOP-3168
>             Project: FOP
>          Issue Type: Bug
>            Reporter: Simon Steiner
>            Assignee: Simon Steiner
>            Priority: Major
>             Fix For: main
>
>
> We should use FEATURE_SECURE_PROCESSING feature to secure XSL input



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to