Questions tagged [xsl]

Extensible Stylesheet Language (XSL) is an XML based language that is used to transform XML documents. Can be used for questions about XSLT as well as XSL-FO.

Filter by
Sorted by
Tagged with
0
votes
0answers
27 views

Should xsl:include and xsl:import be considered invalid now, given XXE injection vulnerability in OWASP top 10?

The xsl:include and xsl:import statements' purpose have been invalidated, since they are used to reference external entities, which leads to the OWASP top 10 vulnerability that is XXE injection. ...
1
vote
0answers
69 views

CWE-611: Improper Restriction of XML External Entity Reference with XSL include

Veracode reports that the below code is susceptible to CWE-611: Improper Restriction of XML External Entity Reference. XslCompiledTransform transform = new XslCompiledTransform(); transform.Load(...
9
votes
4answers
5k views

Execute a PHP function that returns an array from an XSL file

There is a security challenge where you have to execute code on the server to retrieve a flag, and this code has to be executed using an XSL document. So I found a way to make the server interpret my ...
2
votes
1answer
111 views

Are browsers fetching the XSLT namespace over HTTP when transforming XML?

According to the W3C recommendation (and according to W3C Schools), an XSL style sheet using XSLT should be declared as follows: <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/...