Kevin Flynn wrote:
> 
> Image file names in my XML documents are constructed from two attributes,
> file-name and htm-type. I tried to display them in XXE by entering the
> following in my CSS file:
> 
> image {
>     content: image(attr(file-name) "." attr(htm-type), -400, -200);
> }
> 
> but it doesn't work.

image {
content: eval("image('", attr(file-name), ".", attr(htm-type),
"',-400,-200)");
}

And all quotes are very important.

Reply via email to