Home. 
.

transparent

transparent

transparent

Altova Mailing List Archives


XSV potential issue

From: Cory Virok <cory@---------.--->
To: xmlschema-dev@--.---
Date: 7/14/2005 5:56:00 AM
To whom it may concern,

I was using the XSV utility today, 
(http://www.w3.org/2001/03/webdata/xsv works great! thanks) and saw that 
there was no problems in importing any file on the server within my schema.

Ex: try validating this:

<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:blah="ns" 
elementFormDefault="qualified" attributeFormDefault="unqualified">
    <xs:import namespace="blah" schemaLocation="/etc/passwd"/>
</xs:schema>

You'll get errors, of course since /etc/passwd is not valid XML, but the 
fact that the XSV server has access to it is a potential danger.

Thought you might like to know,
- Cory Virok


From petexmldev@t... Fri Jul 15 09:58:53 2005
R


transparent
Print
Mail
Digg
delicious
Disclaimer
.

These Archives are provided for informational purposes only and have been generated directly from the Altova mailing list archive system and are comprised of the lists set forth on www.altova.com/list/index.html. Therefore, Altova does not warrant or guarantee the accuracy, reliability, completeness, usefulness, non-infringement of intellectual property rights, or quality of any content on the Altova Mailing List Archive(s), regardless of who originates that content. You expressly understand and agree that you bear all risks associated with using or relying on that content. Altova will not be liable or responsible in any way for any content posted including, but not limited to, any errors or omissions in content, or for any losses or damage of any kind incurred as a result of the use of or reliance on any content. This disclaimer and limitation on liability is in addition to the disclaimers and limitations contained in the Website Terms of Use and elsewhere on the site.

.
.

transparent

transparent