This is the mail archive of the
xsl-list@mulberrytech.com
mailing list .
RE: ** security problem and link
- To: xsl-list at mulberrytech dot com
- Subject: RE: ** security problem and link
- From: "Mar Fior" <pupipai at hotmail dot com>
- Date: Fri, 18 Feb 2000 09:18:46 CET
- Reply-To: xsl-list at mulberrytech dot com
It's true!
Thanks Duane!
Marcella
>From: "Duane Nickull" <duane@xmlglobal.com>
>Reply-To: xsl-list@mulberrytech.com
>To: <xsl-list@mulberrytech.com>
>Subject: RE: ** security problem and link
>Date: Thu, 17 Feb 2000 10:20:52 -0800
>
>
>
>A semi colon character was expected. Error processing resource
>'file://C:\MyXml\pp.xsl'. Line 13, Position 67
>
>
><TD><A
>HREF="http://localhost:8080/servlet/picInfo?code=A1A&gender=pf&language=Engl
>ish"><xsl:value-of
>select="@code"/></A></TD>");
>------------------------------------------------------------------^
>
>
>Marcella:
>
>Your caret is pointing at the ampersand if you count the character spaces
>to
>67. Many people are probably looking at this problem incorrectly as the
>line wrap will obfuscate the code by placing an extra "\n" after the <A>
>element.
>
>The problem is due to the offending & character which does appear in your
>url encoded string in position 66. The correct XML syntax is to replace
>the
>"&" with it's entity reference "&" then the nice parser will see the
>semicolon and be happy.
>
>Cheers
>
>Duane Nickull
>XML Global
>http://www.xmlglobal.com
>
>
> XSL-List info and archive: http://www.mulberrytech.com/xsl/xsl-list
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
XSL-List info and archive: http://www.mulberrytech.com/xsl/xsl-list