My custom stylesheet uses the document() function. After much trial and
error, I've found that the PUBLIC ID in the document's DOCTYPE
identifier is not being used to find its dtd; only the system path is
used, so XXE complains with: "Warning: Failure reading file: ...". If I
change the system path to a full path to the dtd, or if I remove the
DOCTYPE declaration altogether, the problem goes away.
 
Is this expected behavior? Is there any way to configure XXE to get
around this issue, ie. turn off validation during transform, or map
Saxon's resolver to the XXE catalogs?
 
Thanks,
 

Mark Fletcher

Workday(tm)

www.workday.com <http://www.workday.com/> 

925-951-9053 (office)

mark.fletcher at workday.com

 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
http://www.xmlmind.com/pipermail/xmleditor-support/attachments/20060807/b9d6c5fc/attachment.htm
 

Reply via email to