From: Michael Kay <mike@sa...> - 2006-05-24 08:31:57
SaxonServlet (which is provided as a "starter" application for users to
modify and customize to their own requirements) uses getRealPath() to
resolve the value supplied in the source parameter. If you want it to
contain an absolute URI, you can simply pass the URI directly to the
Do take care to avoid denial-of-service attacks if you write a servlet that
can process documents supplied by users over the internet. The danger is
particularly severe if you accept untrusted stylesheets: in this case it is
essential to set the Saxon configuration option that prevents calls to Java
methods. However, DoS attacks are also possible with source documents,
through use of malicious entity references.
> -----Original Message-----
> From: saxon-help-admin@...
> [mailto:saxon-help-admin@...] On Behalf Of E. Llona
> Sent: 23 May 2006 01:06
> To: saxon-help@...
> Subject: [saxon] passing URI as source for servlet
> I would like to use a URI as the source document for the
> saxon servlet, one that is not on the same server as the
> servlet. For example:
> Is there any way to do this?
> Thanks for any help,
> Using Tomcat but need to do more? Need to support web
> services, security?
> Get stuff done quickly with pre-integrated technology to make
> your job easier Download IBM WebSphere Application Server
> v.1.0.1 based on Apache Geronimo
> saxon-help mailing list