Changes for page Engine_XalanJ

Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -25,29 +25,21 @@
25	25	* Java properties disclosure
26	26	* Java environment disclosure
27	27
28		-== Java properties disclosure ==
29		-
30		-The xsl:system-property() standard function can be called with non standard arguments, mapped to Java properties.
31		-
32		-|=Namespace|=Extension function|=PoC|=Sample output
33		-|http:~/~/xml.apache.org/xalan|checkEnvironment()|[[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]]|[[xalanj-checkenv-output.txt>>attach:xalanj-checkenv-output.txt]]
34		-
35	35	== Java environment disclosure ==
36	36
37		-The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]) will display some information about the execution context (packages, paths, versions, ...).
	30	+The checkEnvironment() extension function (documented [[here>>http://xml.apache.org/xalan-j/faq.html#faq-N10064||rel="__blank"]]), associated to the Xalan namespace, will display some information about the execution context (packages, paths, versions, ...). The output of the execution of [[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]] is [[attached>>attach:xalanj-checkenv-output.txt]].
38	38
39	39	|=Namespace|=Extension function|=PoC|=Sample output
40		-|http:~/~/xml.apache.org/xalan|checkEnvironment()|[[xalanj-checkenv.xsl>>attach:xalanj-checkenv.xsl]]|[[xalanj-checkenv-output.txt>>attach:xalanj-checkenv-output.txt]]
	33	+|http:~/~/xml.apache.org/xalan/java/java.util.Date|new|[[xalanj-java-date.xsl>>attach:xalanj-java-date.xsl]]|[[xalanj-java-date-output.txt>>attach:xalanj-java-date-output.txt]]\
41	41
	35	+XX
	36	+
42	42	== Java code execution ==
43	43
44		-The attached code will display the current date using a newly created "java.util.Date" object. This should be enough to demonstrate Java code execution.
	39	+The following code will display the current date :
45	45
	41	+TODO
46	46
47		-|=Namespace|=Extension function|=PoC|=Sample output
48		-|http:~/~/xml.apache.org/xalan/java/java.util.Date|new()|[[xalanj-java-date.xsl>>attach:xalanj-java-date.xsl]]|Current date:
49		-Wed Jan 11 22:45:07 CET 2012
50		-
51	51	== Execution of external commands ==
52	52
53	53	The following code will execute the command "touch /tmp/hello" :