boostsecurityio / boostsecurityio/lotp
[LOTP] Add xsltproc
Open
good first issue
idea
- Dominant language
- HTML
- Stars
- 164
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
# Description of the LOTP tool
xsltproc makes old-school XXE hard / if not impossible? because of URI constraints, but supported exsl:document extension ([exslt.github.io/exsl/elements/document/index.html](https://exslt.github.io/exsl/elements/document/index.html)) provides an arbitrary write primitive (ex. [Koha-Community/Koha@main/t/db_dependent/Koha/XSLT/Security.t#L64-L75](https://github.com/Koha-Community/Koha/blob/main/t/db_dependent/Koha/XSLT/Security.t?rgh-link-date=2024-07-15T16%3A47%3A56Z#L64-L75))
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.