Rob Crittenden wrote on 3/5/2004, 1:42 PM:

 >
 > Sorry, poor wording on my part. Should any webserver allow including via
 >   relative directories like this? What is to prevent an xslt from
 > including ../../../etc/passwd? Or is there an explicit limitation to the
 > document root?
 >

or is this something your external entities command should handle?


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.

Reply via email to