[ https://issues.apache.org/jira/browse/FOP-3168?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17823806#comment-17823806 ]
Joshua Marquart commented on FOP-3168: -------------------------------------- I have pointed this out elsewhere. Apache Xalan has bug XALAN-J-2591, which removes XML attributes on transformation when FEATURE_SECURE_PROCESSING is applied. Servicemix Xalan 2.7.3_3 is the only build that remediates the bug. They did not include the fix in prior main Xalan releases. > Add secure processing for XSL input > ----------------------------------- > > Key: FOP-3168 > URL: https://issues.apache.org/jira/browse/FOP-3168 > Project: FOP > Issue Type: Bug > Reporter: Simon Steiner > Assignee: Simon Steiner > Priority: Major > Fix For: main > > > We should use FEATURE_SECURE_PROCESSING feature to secure XSL input -- This message was sent by Atlassian Jira (v8.20.10#820010)