GNOME Bugzilla – Bug 342045
xsltCheckRead and xsltCheckWrite do not pass on the URL
Last modified: 2021-07-05 10:59:18 UTC
These functions don't seem to pass the URL to the registered access control functions. According to the source code, only "url->path" is passed, but that is highly dependent on the URL parser and yields NULL in whatever I tested. This renders any use of this API absolutely meaningless. It is also unintuitively different from the document loader APIs in libxml2/libxslt. To find out if access can be granted, functions should have access to the complete, unparsed URL instead of a minor part of it.
GNOME is going to shut down bugzilla.gnome.org in favor of gitlab.gnome.org. As part of that, we are mass-closing older open tickets in bugzilla.gnome.org which have not seen updates for a longer time (resources are unfortunately quite limited so not every ticket can get handled). If you can still reproduce the situation described in this ticket in a recent and supported software version, then please follow https://wiki.gnome.org/GettingInTouch/BugReportingGuidelines and create a new ticket at https://gitlab.gnome.org/GNOME/libxslt/-/issues/ Thank you for your understanding and your help.