You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@commons.apache.org by Paul Copeland <te...@jotobjects.com> on 2006/07/13 00:30:48 UTC

turning off extension functions - is there a way

We have AJAX clients that are invoking XPath expressions on persistent object graphs on the server. Pretty cool, but the JXPath ability to invoke methods on the node objects (and arbitrary Java objects) within the XPath expression is a security concern (obviously).  Is there a way to turn this feature off so that we only have the core XPath functions available?

Thanks - Paul Copeland



---------------------------------------------------------------------
To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-user-help@jakarta.apache.org