Details
-
Type:
Bug
-
Status: Open
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: 2.0.x
-
Fix Version/s: None
-
Component/s: Xalan
-
Security Level: No security risk; visible to anyone (Ordinary problems in Xalan projects. Anybody can view the issue.)
-
Labels:None
-
Xalan info:PatchAvailable
Description
In case an XSLT file contains reference to any entities, and an entity resolver is used, the resolver is given a chance to look up in the catalog only after the original reference in the internet is consulted and fetched. A case may look like this:
<?xml version="1.0" standalone="yes" ?>
<!DOCTYPE transform [
<!ENTITY % w3centities-f PUBLIC "-//W3C//ENTITIES Combined Set//EN//XML"
"http://www.w3.org/2003/entities/2007/w3centities-f.ent">
%w3centities-f;
]>
<xsl:transform version="1.0"
...
For that case if no internet connection is available, a java.net.UnknownHostException is thrown by Xalan-J command line utility referencing "www.w3.org".
