[jira] [Commented] (JENA-651) Base document URI reveals system path

["Andy Seaborne (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/JENA-651?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13923949#comment-13923949 ] 

Andy Seaborne commented on JENA-651:
------------------------------------

Fixed in Fuseki (v1 and v2 codebases).

A dummy base URI is supplied to parsing.


> Base document URI reveals system path 
> --------------------------------------
>
>                 Key: JENA-651
>                 URL: https://issues.apache.org/jira/browse/JENA-651
>             Project: Apache Jena
>          Issue Type: Improvement
>          Components: Jena
>    Affects Versions: Jena 2.11.2
>            Reporter: Sarven Capadisli
>
> This may not be a bug per se because I may be misinterpreting how base URIs are supposed to work i.e., whether it is a security concern or not. Consider the following query at http://sparql.org/query.html :
> PREFIX : <>
> CONSTRUCT { <> :bar :baz }
> WHERE { ?s ?p ?o }
> Result:
> @prefix dc:    <http://purl.org/dc/elements/1.1/> .
> @prefix :      <file:///usr/home/andy/SPARQLer/> .
> @prefix ns:    <http://example.org/ns#> .
> @prefix vcard: <http://www.w3.org/2001/vcard-rdf/3.0#> .
> :       :bar    :baz .
> Note the URI for :



--
This message was sent by Atlassian JIRA
(v6.2#6252)