external-schemaLocation property does not override the schema location
attribute in the instance
------------------------------------------------------------------------------------------------
Key: XERCESC-1713
URL: https://issues.apache.org/jira/browse/XERCESC-1713
Project: Xerces-C++
Issue Type: Bug
Components: Validating Parser (Schema) (Xerces 1.5 or up only)
Affects Versions: 2.7.0
Environment: any
Reporter: Boris Kolpackov
The documentation for the external-schemaLocation and
external-noNamespaceSchemaLocation properties state that if specified, the
instance document's schemaLocation and noNamespaceSchemaLocation attributes
will be effectively ignored. This appears not to be the case. If the schema
specified with the external-* properies can not be opened, the parser proceeds
to try paths from the schemaLocation and noNamespaceSchemaLocation attributes.
I think this does not make much sense and is actually a potential security
threat. Normally if one specifies the schema location with the external-*
properties they don't want the values from the instance to have any effect.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
