On Mon, Aug 24, 2015 at 4:08 PM, steven.walters <[email protected]> wrote: > ...If the intent was to not allow absolute URLs in the XML format to exclude > the possibility of "arbitrary content", then that should've been the > approach taken instead of the current approach of simply not importing if > the would-be URL spec (/baseLocation/ here) is null....
Absolute URLs are fine, it's local file references that can be problematic, similar to your example. -Bertrand
