Kevin Flynn wrote:
>
> Image file names in my XML documents are constructed from two attributes,
> file-name and htm-type. I tried to display them in XXE by entering the
> following in my CSS file:
>
> image {
> content: image(attr(file-name) "." attr(htm-type), -400, -200);
> }
>
> but it doesn't work.
image {
content: eval("image('", attr(file-name), ".", attr(htm-type),
"',-400,-200)");
}
And all quotes are very important.

