dcheng1248 opened a new issue, #9182:
URL: https://github.com/apache/camel-quarkus/issues/9182
### Bug description
Hello,
we performed a quarkus update from 3.38.1 to 3.39.4 today and the camel
quarkus xslt-saxon component threw the following error:
`net.sf.saxon.trans.XPathException: URI scheme 'file' has been disallowed.`
This seems to be related to recent security features. We found the following
workaround, by adding the transformer factory:
```
public class SaxonProducer {
@Produces
@Singleton
@Unremovable
@Named("saxonTf")
public TransformerFactory saxonTransformerFactory() throws
TransformerConfigurationException {
TransformerFactoryImpl factory = new TransformerFactoryImpl();
factory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
factory.setAttribute(XMLConstants.ACCESS_EXTERNAL_DTD, "");
factory.setAttribute(XMLConstants.ACCESS_EXTERNAL_STYLESHEET, "file");
return factory;
}
}
```
We did not find anything in the xslt-saxon documentation that enables easier
configuration. Would appreciate knowing if we missed an obvious solution or if
this is bug.
Thank you for your work.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
