Changes for page Engine_XalanJ
on 2012/01/08 19:46
on 2012/01/11 23:21
Summary
-
Page properties (1 modified, 0 added, 0 removed)
-
Attachments (0 modified, 2 added, 1 removed)
Details
- Page properties
-
- Content
-
... ... @@ -1,14 +1,21 @@ 1 1 [[Xalan-J>>http://xml.apache.org/xalan-j/||rel="__blank" title="Xalan-J Home Page"]] is a Java based XSLT engine by the Apache Project. 2 2 3 3 4 -Supported XSLTversion: 1.04 +== Supported version == 5 5 6 +1.0 6 6 8 +== Command line == 9 + 10 +$> java org.apache.xalan.xslt.Process -in foo.xml -xsl foo.xsl 11 + 12 +__Note__ : xml-apis.jar, xercesImpl.jar and xalan*.jar must be in the $CLASSPATH 13 + 7 7 == Identification strings == 8 8 9 -| 10 -| 11 -| 16 +|=xsl:vendor-url|http:~/~/xml.apache.org/xalan-j 17 +|=xsl:vendor|Apache Software Foundation 18 +|=xsl:version|1.0 12 12 13 13 == Special features == 14 14 ... ... @@ -15,67 +15,32 @@ 15 15 * File creation 16 16 * Code execution 17 17 * JDBC connectivity 18 -* Java properties 19 -* CheckEnv()25 +* Java properties disclosure 26 +* Java environment disclosure 20 20 21 -== CheckEnv()==28 +== Java properties disclosure == 22 22 23 -The followingcodewillisplaysomeinformation abouttheexecutioncontext:30 +The xsl:system-property() standard function can be called with non standard arguments, mapped to Java properties. 24 24 25 -[[checkenv.xsl>>attach:checkenv.xsl]] 32 +|=Namespace|=Extension function|=PoC|=Sample output 33 +|http:~/~/xml.apache.org/xalan|checkEnvironment()|[[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]]|[[xalanj-checkenv-output.txt>>attach:xalanj-checkenv-output.txt]] 26 26 27 - TODO35 +== Java environment disclosure == 28 28 29 - ===Code ===37 +The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]) will display some information about the execution context (packages, paths, versions, ...). 30 30 31 -##<?xml version="1.0"?> 32 -<xsl:stylesheet xmlns:xsl="http:~/~/www.w3.org/1999/XSL/Transform" 33 - xmlns:xalan="http:~/~/xml.apache.org/xalan" 34 - exclude-result-prefixes="xalan" 35 - version="1.0">## 39 +|=Namespace|=Extension function|=PoC|=Sample output 40 +|http:~/~/xml.apache.org/xalan|checkEnvironment()|[[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]]|[[xalanj-checkenv-output.txt>>attach:xalanj-checkenv-output.txt]] 36 36 37 - <xsl:output indent="yes"/> 38 - <xsl:template match="/"> 39 - (% style="color:red" %)<xsl:copy-of select="xalan:checkEnvironment()"/> 40 - 41 - </xsl:template> 42 -\\</xsl:stylesheet> 43 - 44 -=== Output === 45 - 46 -<?xml version="1.0" encoding="UTF-8"?><checkEnvironmentExtension> 47 -<EnvironmentCheck version="$Revision$"> 48 -<environment> 49 -<item key="version.DOM.draftlevel">2.0fd</item> 50 -<item key="java.class.path">:/usr/share/java/xalan2.jar:/usr/share/java/xml-apis.jar:/usr/share/java/xercesImpl.jar:/usr/share/java/xalan25.jar:/usr/share/java/bsf-2.4.0.jar</item> 51 -<item key="version.JAXP">1.1 or higher</item> 52 -<item key="java.ext.dirs">/usr/lib/jvm/java-6-openjdk/jre/lib/ext:/usr/java/packages/lib/ext</item> 53 -<item key="version.xerces2">Xerces-J 2.9.1</item> 54 -<item key="version.xerces1">not-present</item> 55 -<item key="version.xalan2_2">Xalan Java 2.7.1</item> 56 -<item key="version.xalan1">not-present</item> 57 -<item key="version.ant">not-present</item> 58 -<item key="java.version">1.6.0_20</item> 59 -<item key="version.DOM">2.0</item> 60 -<item key="version.crimson">not-present</item> 61 -<item key="sun.boot.class.path">/usr/lib/jvm/java-6-openjdk/jre/lib/resources.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/rt.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/sunrsasign.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/jsse.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/jce.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/charsets.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/netx.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/plugin.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/rhino.jar:/usr/lib/jvm/java-6-openjdk/jre/lib/modules/jdk.boot.jar:/usr/lib/jvm/java-6-openjdk/jre/classes</item> 62 -<foundJar desc="apis.jar-apparent.version" name="xml">xml-apis.jar present-unknown-version</foundJar> 63 -<foundJar desc="apis.jar-path" name="xml">/usr/share/java/xml-apis.jar</foundJar> 64 -<foundJar desc="apparent.version" name="xercesImpl.jar">xercesImpl.jar WARNING.present-unknown-version</foundJar> 65 -<foundJar desc="path" name="xercesImpl.jar">/usr/share/java/xercesImpl.jar</foundJar> 66 -<item key="version.SAX">2.0</item> 67 -<item key="version.xalan2x">Xalan Java 2.7.1</item> 68 -</environment> 69 -<status result="OK"/> 70 -</EnvironmentCheck> 71 -</checkEnvironmentExtension> 72 - 73 73 == Java code execution == 74 74 75 -The followingcode will display the current date:44 +The attached code will display the current date using a newly created "java.util.Date" object. This should be enough to demonstrate Java code execution. 76 76 77 -TODO 78 78 47 +|=Namespace|=Extension function|=PoC|=Sample output 48 +|http:~/~/xml.apache.org/xalan/java/java.util.Date|new()|[[xalanj-java-date.xsl>>attach:xalanj-java-date.xsl]]|Current date: 49 +Wed Jan 11 22:45:07 CET 2012 50 + 79 79 == Execution of external commands == 80 80 81 81 The following code will execute the command "touch /tmp/hello" :
- checkenv.xsl
-
- Author
-
... ... @@ -1,1 +1,0 @@ 1 -xwiki:XWiki.NicolasGregoire - Size
-
... ... @@ -1,1 +1,0 @@ 1 -324 bytes - Content
-
... ... @@ -1,14 +1,0 @@ 1 -<?xml version="1.0"?> 2 - 3 -<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" 4 - xmlns:xalan="http://xml.apache.org/xalan" 5 - exclude-result-prefixes="xalan" 6 - version="1.0"> 7 - 8 - <xsl:output indent="yes"/> 9 - <xsl:template match="/"> 10 - <xsl:copy-of select="xalan:checkEnvironment()"/> 11 - </xsl:template> 12 - 13 -</xsl:stylesheet> 14 -
- xalanj-checkenv-output.txt
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +xwiki:XWiki.NicolasGregoire - Size
-
... ... @@ -1,0 +1,1 @@ 1 +2.5 KB - Content
-
... ... @@ -1,0 +1,31 @@ 1 +<?xml version="1.0" encoding="UTF-8"?><checkEnvironmentExtension> 2 + <EnvironmentCheck version="$Revision$"> 3 + <environment> 4 + <item key="version.DOM.draftlevel">2.0fd</item> 5 + <item key="java.class.path">/usr/share/java/xalan2.jar:/usr/share/java/xml-apis.jar:/usr/share/java/xercesImpl.jar:/usr/share/java/serializer.jar:/usr/share/java/xsltc.jar</item> 6 + <item key="version.JAXP">1.1 or higher</item> 7 + <item key="java.ext.dirs">/usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/ext:/usr/java/packages/lib/ext</item> 8 + <item key="version.xerces2">Xerces-J 2.9.1</item> 9 + <item key="version.xerces1">not-present</item> 10 + <item key="version.xalan2_2">Xalan Java 2.7.1</item> 11 + <item key="version.xalan1">not-present</item> 12 + <item key="version.ant">not-present</item> 13 + <item key="java.version">1.6.0_26</item> 14 + <item key="version.DOM">2.0</item> 15 + <item key="version.crimson">not-present</item> 16 + <item key="sun.boot.class.path">/usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/resources.jar:/usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/rt.jar:/usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/sunrsasign.jar:/usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/jsse.jar:/usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/jce.jar:/usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/charsets.jar:/usr/lib/jvm/java-6-sun-1.6.0.26/jre/lib/modules/jdk.boot.jar:/usr/lib/jvm/java-6-sun-1.6.0.26/jre/classes</item> 17 + <foundJar desc="apis.jar-apparent.version" name="xml">xml-apis.jar present-unknown-version</foundJar> 18 + <foundJar desc="apis.jar-path" name="xml">/usr/share/java/xml-apis.jar</foundJar> 19 + <foundJar desc="apparent.version" name="xercesImpl.jar">xercesImpl.jar WARNING.present-unknown-version</foundJar> 20 + <foundJar desc="path" name="xercesImpl.jar">/usr/share/java/xercesImpl.jar</foundJar> 21 + <foundJar desc="apparent.version" name="serializer.jar">serializer.jar present-unknown-version</foundJar> 22 + <foundJar desc="path" name="serializer.jar">/usr/share/java/serializer.jar</foundJar> 23 + <foundJar desc="apparent.version" name="xsltc.jar">xsltc.jar present-unknown-version</foundJar> 24 + <foundJar desc="path" name="xsltc.jar">/usr/share/java/xsltc.jar</foundJar> 25 + <item key="version.SAX">2.0</item> 26 + <item key="version.xalan2x">Xalan Java 2.7.1</item> 27 + </environment> 28 + <status result="OK"/> 29 + </EnvironmentCheck> 30 +</checkEnvironmentExtension> 31 +
- xalanj-checkenv.xsl
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +xwiki:XWiki.NicolasGregoire - Size
-
... ... @@ -1,0 +1,1 @@ 1 +310 bytes - Content
-
... ... @@ -1,0 +1,11 @@ 1 +<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" 2 + xmlns:xalan="http://xml.apache.org/xalan" 3 + version="1.0"> 4 + 5 + <xsl:output method="xml" indent="yes" xalan:indent-amount="4"/> 6 + <xsl:template match="/"> 7 + <xsl:copy-of select="xalan:checkEnvironment()"/> 8 + </xsl:template> 9 + 10 +</xsl:stylesheet> 11 +