Skip to main content

Questions tagged [xsl]

Extensible Stylesheet Language (XSL) is an XML based language that is used to transform XML documents. Can be used for questions about XSLT as well as XSL-FO.

1 vote
0 answers
259 views

CWE-611: Improper Restriction of XML External Entity Reference with XSL include

Veracode reports that the below code is susceptible to CWE-611: Improper Restriction of XML External Entity Reference. XslCompiledTransform transform = new XslCompiledTransform(); transform.Load(...
Hoppe's user avatar
  • 143
12 votes
4 answers
7k views

Execute a PHP function that returns an array from an XSL file

There is a security challenge where you have to execute code on the server to retrieve a flag, and this code has to be executed using an XSL document. So I found a way to make the server interpret my ...
Sidahmed's user avatar
  • 679
2 votes
1 answer
266 views

Are browsers fetching the XSLT namespace over HTTP when transforming XML?

According to the W3C recommendation (and according to W3C Schools), an XSL style sheet using XSLT should be declared as follows: <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/...
Eleron's user avatar
  • 23