You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Mike Pfaff (Created) (JIRA)" <ji...@apache.org> on 2012/03/06 15:59:57 UTC
[jira] [Created] (SLING-2433) Add xml-stylesheet support to XML
:import POST operation
Add xml-stylesheet support to XML :import POST operation
--------------------------------------------------------
Key: SLING-2433
URL: https://issues.apache.org/jira/browse/SLING-2433
Project: Sling
Issue Type: Improvement
Components: JCR, Servlets
Affects Versions: JCR ContentLoader 2.1.4, Servlets Post 2.1.0
Environment: CQ 5.5
Reporter: Mike Pfaff
Priority: Minor
It would be nice if one could also POST an XSL file for an XML :import operation, so that the XML file is transformed before the import. This would help a lot when one needs to import a custom(= non-JCR-view) XML file
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (SLING-2433) Add xml-stylesheet support to XML
:import POST operation
Posted by "Eric Norman (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-2433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13231622#comment-13231622 ]
Eric Norman commented on SLING-2433:
------------------------------------
I would vote against doing this. Allowing the user to upload an untrusted xsl stylesheet and do the transformation on the server introduces lots of nasty security problems.
> Add xml-stylesheet support to XML :import POST operation
> --------------------------------------------------------
>
> Key: SLING-2433
> URL: https://issues.apache.org/jira/browse/SLING-2433
> Project: Sling
> Issue Type: Improvement
> Components: JCR, Servlets
> Affects Versions: Servlets Post 2.1.0, JCR ContentLoader 2.1.4
> Environment: CQ 5.5
> Reporter: Mike Pfaff
> Priority: Minor
>
> It would be nice if one could also POST an XSL file for an XML :import operation, so that the XML file is transformed before the import. This would help a lot when one needs to import a custom(= non-JCR-view) XML file
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (SLING-2433) Add xml-stylesheet support to XML
:import POST operation
Posted by "Felix Meschberger (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-2433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13232511#comment-13232511 ]
Felix Meschberger commented on SLING-2433:
------------------------------------------
> I would vote against doing this. .... nasty security problems.
Agreed.
Also, we disabled XSLT in the content loader (which IIRC is used by POST :import) if the XSLT location was unknown (SLING-2359).
> Add xml-stylesheet support to XML :import POST operation
> --------------------------------------------------------
>
> Key: SLING-2433
> URL: https://issues.apache.org/jira/browse/SLING-2433
> Project: Sling
> Issue Type: Improvement
> Components: JCR, Servlets
> Affects Versions: Servlets Post 2.1.0, JCR ContentLoader 2.1.4
> Environment: CQ 5.5
> Reporter: Mike Pfaff
> Priority: Minor
>
> It would be nice if one could also POST an XSL file for an XML :import operation, so that the XML file is transformed before the import. This would help a lot when one needs to import a custom(= non-JCR-view) XML file
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (SLING-2433) Add xml-stylesheet support to XML
:import POST operation
Posted by "Mike Pfaff (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-2433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13227570#comment-13227570 ]
Mike Pfaff commented on SLING-2433:
-----------------------------------
That's a possibility for me, but the end users usually prefer not to have to install/run custom-written tools with a lot of XML/XSL-Java/-Library dependencies (aka dependency hell ;) . They usually just work with the browser and sometimes maybe a small shell script / batch file that just calls curl with some params.
> Add xml-stylesheet support to XML :import POST operation
> --------------------------------------------------------
>
> Key: SLING-2433
> URL: https://issues.apache.org/jira/browse/SLING-2433
> Project: Sling
> Issue Type: Improvement
> Components: JCR, Servlets
> Affects Versions: Servlets Post 2.1.0, JCR ContentLoader 2.1.4
> Environment: CQ 5.5
> Reporter: Mike Pfaff
> Priority: Minor
>
> It would be nice if one could also POST an XSL file for an XML :import operation, so that the XML file is transformed before the import. This would help a lot when one needs to import a custom(= non-JCR-view) XML file
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (SLING-2433) Add xml-stylesheet support to XML
:import POST operation
Posted by "Carsten Ziegeler (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-2433?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13227331#comment-13227331 ]
Carsten Ziegeler commented on SLING-2433:
-----------------------------------------
If you have both XML and XSL on the client you could maybe just transform the XML before posting?
> Add xml-stylesheet support to XML :import POST operation
> --------------------------------------------------------
>
> Key: SLING-2433
> URL: https://issues.apache.org/jira/browse/SLING-2433
> Project: Sling
> Issue Type: Improvement
> Components: JCR, Servlets
> Affects Versions: Servlets Post 2.1.0, JCR ContentLoader 2.1.4
> Environment: CQ 5.5
> Reporter: Mike Pfaff
> Priority: Minor
>
> It would be nice if one could also POST an XSL file for an XML :import operation, so that the XML file is transformed before the import. This would help a lot when one needs to import a custom(= non-JCR-view) XML file
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira