Firefox 3 - XLST - Fails if local with .. in path [FIXED]

tripecac · Post by **tripecac** » June 17th, 2008, 1:58 pm

Firefox 3 fails to process XSLT files if they are outside of the current XML file's path (or descendant paths).

For example, these work:

<?xml-stylesheet type="text/xsl" href="test.xsl"?>
<?xml-stylesheet type="text/xsl" href="sub/test.xsl"?>

But these fail:

<?xml-stylesheet type="text/xsl" href="../test.xsl"?>
<?xml-stylesheet type="text/xsl" href="../sub/test.xsl"?>

This seems to only be for local files (not handled by a web server). I can reproduce it in both Ubuntu and Vista.

Firefox 2 and IE7 don't have this problem.

Any idea how to fix it?

Thanks!

Travis

tripecac · Post by **tripecac** » June 17th, 2008, 2:07 pm

Here are my simplified test files:

test/xsl/test.xsl

Code: Select all

<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:template match="/test"><html><body><h1>This worked: <xsl:apply-templates /></h1></body></html></xsl:template>
</xsl:stylesheet>

test/xsl/test.xml (xsl in same path, works)

Code: Select all

<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="test.xsl"?>
<test>xsl in same path</test>

test/test.xml (xsl in child path, works)

Code: Select all

<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="xsl/test.xsl"?>
<test>xsl in child path</test>

test/xsl/sub/test.xml (xsl in parent path, FAILS)

Code: Select all

<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="../test.xsl"?>
<test>xsl in parent path</test>

test/xml/test.xml (xsl in sibling path, FAILS)

Code: Select all

<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="../xsl/test.xsl"?>
<test>xsl in sibling path</test>

Post by **Daifne** » June 17th, 2008, 2:46 pm

Moving to Web Development

jscher2000 · Post by **jscher2000** » June 17th, 2008, 4:21 pm

I don't have Firefox 3. Is the problem limited to relative ../ paths? How about an absolute sibling path, such as "/styles/text.xsl"?

tripecac · Post by **tripecac** » June 17th, 2008, 4:38 pm

Good question!

This works: file:///X:/temp/xslt-test/xsl/test.xsl
but this doesn't: /temp/xslt-test/xsl/test.xsl

(at least in Vista)

jscher2000 · Post by **jscher2000** » June 17th, 2008, 5:05 pm

This blog post seems relevant: John Resig - Tightened Local File Security

And this bug: Bug 402983 – Security checks that should be symmetric are now asymmetric

tripecac · Post by **tripecac** » June 17th, 2008, 5:39 pm

Thank you so much!!!

Here's the solution:

1) type about:config in the address bar
2) change security.fileuri.strict_origin_policy to false

This worked for me (so far).

Firefox 3 - XLST - Fails if local with .. in path [FIXED]

Firefox 3 - XLST - Fails if local with .. in path [FIXED]

Re: Firefox 3 - XLST - Fails if local stylesheet has .. in path

Re: Firefox 3 - XLST - Fails if local stylesheet has .. in path

Re: Firefox 3 - XLST - Fails if local stylesheet has .. in path

Re: Firefox 3 - XLST - Fails if local stylesheet has .. in path

Re: Firefox 3 - XLST - Fails if local stylesheet has .. in path

Re: Firefox 3 - XLST - Fails if local stylesheet has .. in path