Actions
Bug #5847
closed
Collection finders should respect allowedProtocols
Start date:
2023-01-23
Due date:
% Done:
100%
Estimated time:
Legacy ID:
Applies to branch:
11, 12, trunk
Fix Committed on Branch:
11, 12, trunk
Description
From https://saxonica.plan.io/boards/3/topics/9248
It seems that setting http://saxon.sf.net/feature/allowedProtocols to e.g. http,https in the intent to disallow access to the local file system prevents any direct access in the form of e.g. unparsed-text('file:/foo/bar/file.txt') but it looks as if (tested with Saxon HE 12 J and C) as if uri-collection('file:/?select=.') continues to work, meaning it returns the file URIs of found files.
Please register to edit this issue
Actions
.