Changes for page Engine_XalanJ
on 2012/01/11 23:21
on 2012/01/11 22:47
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -25,29 +25,23 @@ 25 25 * Java properties disclosure 26 26 * Java environment disclosure 27 27 28 -== Java propertiesdisclosure ==28 +== Java environment disclosure == 29 29 30 -The xsl:system-property()standardfunction canbe calledwithnonstandardarguments, mappedtoJava properties.30 +The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]), associated to the Xalan namespace, will display some information about the execution context (packages, paths, versions, ...). The output of the execution of [[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]] is [[attached>>attach:xalanj-checkenv-output.txt]]. 31 31 32 -|=Namespace|=Extension function|=PoC|=Sample output 33 -|http:~/~/xml.apache.org/xalan|checkEnvironment()|[[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]]|[[xalanj-checkenv-output.txt>>attach:xalanj-checkenv-output.txt]] 34 34 35 -== Java environment disclosure == 33 +~|=Namespace|=Extension function|=PoC|=Sample output 34 +~|http:~~/~~/xml.apache.org/xalan/java/java.util.Date|new|~[~[xalanj-java-date.xsl>>attach~:xalanj-java-date.xsl]]|~[~[xalanj-java-date-output.txt>>attach:xalanj-java-date-output.txt]]~\~\ 36 36 37 -The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]) will display some information about the execution context (packages, paths, versions, ...). 38 38 39 -|=Namespace|=Extension function|=PoC|=Sample output 40 -|http:~/~/xml.apache.org/xalan|checkEnvironment()|[[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]]|[[xalanj-checkenv-output.txt>>attach:xalanj-checkenv-output.txt]] 37 +XX 41 41 42 42 == Java code execution == 43 43 44 -The attachedcode will display the current dateusing a newly created "java.util.Date" object. This should be enough to demonstrate Java code execution.41 +The following code will display the current date : 45 45 43 +TODO 46 46 47 -|=Namespace|=Extension function|=PoC|=Sample output 48 -|http:~/~/xml.apache.org/xalan/java/java.util.Date|new()|[[xalanj-java-date.xsl>>attach:xalanj-java-date.xsl]]|Current date: 49 -Wed Jan 11 22:45:07 CET 2012 50 - 51 51 == Execution of external commands == 52 52 53 53 The following code will execute the command "touch /tmp/hello" :