- From: Norman Walsh <ndw@nwalsh.com>
- Date: Tue, 02 Jun 2015 15:31:47 +0100
- To: XProc Dev <xproc-dev@w3.org>
Received on Tuesday, 2 June 2015 14:32:15 UTC
Florent Georges <fgeorges@fgeorges.org> writes:
> Waw, interesting! Do you have more details about what it does, exactly?
Uhm. It forbids all of the fileutils steps, it does seem to attempt to
forbid access to file: URIs, it rejects attempts to instantiate
extension steps (rather crudely), and forbids access to
p;directory-list, p:exec, and p:store.
That's probably not really enough, but...
Be seeing you,
norm
--
Norman Walsh
Lead Engineer
MarkLogic Corporation
Phone: +1 512 761 6676
www.marklogic.com
Received on Tuesday, 2 June 2015 14:32:15 UTC