Affects Version/s: 2.0.x
Fix Version/s: None
Security Level: No security risk; visible to anyone (Ordinary problems in Xalan projects. Anybody can view the issue.)
In case an XSLT file contains reference to any entities, and an entity resolver is used, the resolver is given a chance to look up in the catalog only after the original reference in the internet is consulted and fetched. A case may look like this:
<?xml version="1.0" standalone="yes" ?>
<!DOCTYPE transform [
<!ENTITY % w3centities-f PUBLIC "-//W3C//ENTITIES Combined Set//EN//XML"
For that case if no internet connection is available, a java.net.UnknownHostException is thrown by Xalan-J command line utility referencing "www.w3.org".