Hi, Trunk does not contain the current version of Xalan (2.7.2) but only xalan-2.7.0.jar. This is a security issue, see: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0107
Are there plans to update to the new version or is it possible / recommended to just update the jar file? Best regards Lars Teuber --------------------------------------------------------------------- To unsubscribe, e-mail: batik-users-unsubscr...@xmlgraphics.apache.org For additional commands, e-mail: batik-users-h...@xmlgraphics.apache.org
