Details
-
Bug
-
Status: Open
-
Major
-
Resolution: Unresolved
-
2.0.x
-
None
-
Security Level: No security risk; visible to anyone (Ordinary problems in Xalan projects. Anybody can view the issue.)
-
None
-
PatchAvailable
Description
In case an XSLT file contains reference to any entities, and an entity resolver is used, the resolver is given a chance to look up in the catalog only after the original reference in the internet is consulted and fetched. A case may look like this:
<?xml version="1.0" standalone="yes" ?>
<!DOCTYPE transform [
<!ENTITY % w3centities-f PUBLIC "-//W3C//ENTITIES Combined Set//EN//XML"
"http://www.w3.org/2003/entities/2007/w3centities-f.ent">
%w3centities-f;
]>
<xsl:transform version="1.0"
...
For that case if no internet connection is available, a java.net.UnknownHostException is thrown by Xalan-J command line utility referencing "www.w3.org".