On Thursday 05 February 2009 14:02:35 Jean-Christophe FORTON wrote:
> I'm back working on my vulnerability assessment project.
> Currently I'm generating xml reports and try to parse them with Xalan
> (JAVA API) but, unfortunately, the reports always contain the following
> line:
>
> <setting name="Misc information on News server[entry]:From address :"
> value="OpenVAS <[email protected]>"/>
>
> My parser doesn't like the "<" ">" of <[email protected]> and says
> my xml input is not valid xml.
>
> Any idea if this problem is fixed in version 2.0.0?
Does xalan tell you that your report.xml contains this line or does the text 
editor of your choice does so?
At least in the 2.0 series characters like ",<,' etc should be 
properly 'escaped' ( openvas-client/nessus/xml_output.c: escape_string).
Actually they are not escaped but replaced by the corresponding html/xml 
entities (like '&quot;'), so its important that you use a tool that does not 
interprete the file too much.

hope its gone in 2.x
felix

-- 
Felix Wolfsteller |  ++49-541-335 08 3451  |  http://www.intevation.de/
PGP Key: 39DE0100
Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-discuss mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss

Reply via email to