stephen.deal at kodak.com wrote:
> Thanks to your help I now have XXE working using our no namespace XML
> schema with styled views.
> 
> The key to the solution was:
> [3] If your root element has no namespace, then you must modify the
> <detect> rule in gpp.xxe.
> For example, use this:
> ---
>    <detect>
>      <and>
>        <rootElementNamespace xsi:nil="true"/>
>        <rootElementLocalName>content_root</rootElementLocalName>
>      </and>
>    </detect>
> ---
> Which means:
> XXE! Apply the GPP configuration to the document you have opened if and
> only if the root element of this document has "content_root", without a
> namespace, as its name.
> 
> My poor attempts at obfuscation of the URL (i.e. hiding the names of our
> servers) resulted in my creating more confusion and inconsistency in
> describing the problem.  Both the gpp.xxe and gpp.xml files did have
> consistent namespaces however it was the no namespace issue that was
> causing the problem.
> 
> Now that it is working as expected I will continue to evaluate XXE for our
> environment. I have more work to do in creating a proper style sheet before
> I can present this to the rest of my team.

In my opinion, the first thing to do is:
---
xsdvalid -s gpp.xsd
---

and then:
---
xsdvalid gpp.xml
---
See http://www.xmlmind.com/xsdvalid.html

But you probably already did that.


Reply via email to