Adam Strzelecki wrote:
> 
> Can you have a look at:
> http://issues.apache.org/bugzilla/show_bug.cgi?id=44466
> 
> It seems that upcoming release of FOP and XMLGraphics will break XMLMind 
> FOP addon because XXE's xmlcatalog URI resolver provided to FOP is 
> always returning SAXSource, but after last image handling changes 
> XMLGrapics is working fine only with StreamSource-s.
> 

The fop.jar included in the "Apache FOP 1.x XSL-FO processor plug-in" 
add-on is not identical to the fop.jar you can download from Apache 
FOP's Web site. We have modified FOP to make it work [1] with Saxon [2] 
with Java 1.4, 1.5, 1.6. After doing this, we have *tested* our modified 
version with every possible case.

(The details of changes is attached to this email.)

Currently the official version of FOP is 0.94. When FOP 0.95 (or 
whatever next version) will be released, be sure that we'll patch FOP 
again and that we'll thoroughly test it one more time.

Now you seem to have have heavily customized the integration of FOP in 
XXE. For example, you seem to use a fop.jar different from the one we 
bundle with the "Apache FOP 1.x XSL-FO processor plug-in" add-on.

You are perfectly free to do this but, please, in such case,
- do not expect FOP to work properly in the context of XXE,
- do not expect support from us.




Reply via email to