[
https://issues.apache.org/jira/browse/FOP-3168?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17823806#comment-17823806
]
Joshua Marquart commented on FOP-3168:
--------------------------------------
I have pointed this out elsewhere.
Apache Xalan has bug XALAN-J-2591, which removes XML attributes on
transformation when FEATURE_SECURE_PROCESSING is applied.
Servicemix Xalan 2.7.3_3 is the only build that remediates the bug. They did
not include the fix in prior main Xalan releases.
> Add secure processing for XSL input
> -----------------------------------
>
> Key: FOP-3168
> URL: https://issues.apache.org/jira/browse/FOP-3168
> Project: FOP
> Issue Type: Bug
> Reporter: Simon Steiner
> Assignee: Simon Steiner
> Priority: Major
> Fix For: main
>
>
> We should use FEATURE_SECURE_PROCESSING feature to secure XSL input
--
This message was sent by Atlassian Jira
(v8.20.10#820010)