http://openoffice.org/bugzilla/show_bug.cgi?id=117643

        Issue Type: DEFECT
           Summary: xmlhelp: help relies on libxslt global security
                    context
    Classification: Code
           Product: framework
           Version: DEV300m104
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P3
         Component: code
        AssignedTo: [email protected]
        ReportedBy: [email protected]
         QAContact: [email protected]


the online help needs to use file URLs, and it is possible to set up
the global libxslt security settings via xsltSetDefaultSecurityPrefs
such that dereferencing file URLs is forbidden.
this would result in the help displaying lots of white space
instead of content.

this is not a problem right now, but could quite easily become
a problem by totally unrelated changes, such as when the
redland libraries were added (see issue 93768).

the help should use xsltSetCtxtSecurityPrefs to set up the
permissions it needs, in order to be more robust.

-- 
Configure bugmail: http://openoffice.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

---------------------------------------------------------------------
Please do not reply to this automatically generated notification
from Bugzilla. Please log into the website and enter your comments.
---------------------------------------------------------------------
--
-----------------------------------------------------------------
To unsubscribe send email to [email protected]
For additional commands send email to [email protected]
with Subject: help
--
-----------------------------------------------------------------
To unsubscribe send email to [email protected]
For additional commands send email to [email protected]
with Subject: help

Reply via email to