Henry Zongaro wrote:
Hi, Rob.
Robert Koberg <[EMAIL PROTECTED]> wrote on 2004-12-07 05:45:31 PM:
> Speaking of security holes, has anything been done (or is planned to be)
> about the ability to turn off extensions (mainly xalan:redirect)? I
> cannot use Xalan in my server environment as I have to run untrusted
> stylesheets.
JAXP 1.3 defines a new feature that you can set on an instance of
TransformerFactory, javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING.
When we add support for JAXP 1.3, that feature should control whether
extensions are supported.
that works for me.
thanks,
-Rob
Thanks,
Henry
------------------------------------------------------------------
Henry Zongaro Xalan development
IBM SWS Toronto Lab T/L 969-6044; Phone +1 905 413-6044
mailto:[EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
