security risk when using exist from oxygen ?!
Hi there, I just discovered what I think is a security risk, or at least a flaw in the way oxygen presents system ids. When evaluating a XPath for a document that is accessed through webdav on an eXist database, the results are displayed in the bottom pane of the window. The column for system ID will show the users credentials, that is, account name and password in clear text. It seems a potential risk to me to expose these things, so I wonder if there is a way to hide that. All the best, Christian -- Christian Wittern Institute for Research in Humanities, Kyoto University 47 Higashiogura-cho, Kitashirakawa, Sakyo-ku, Kyoto 606-8265, JAPAN
Hello, Thank you for reporting this problem. The users credentials should have been filtered from the system ids presented in results panel. We made the necessary fix and a new oXygen build will be available later today. Best Regards, Octavian -- Octavian Nadolu <oXygen/> XML Editor, Schema Editor and XSLT Editor/Debugger http://www.oxygenxml.com Christian Wittern wrote:
Hi there,
I just discovered what I think is a security risk, or at least a flaw in the way oxygen presents system ids.
When evaluating a XPath for a document that is accessed through webdav on an eXist database, the results are displayed in the bottom pane of the window. The column for system ID will show the users credentials, that is, account name and password in clear text. It seems a potential risk to me to expose these things, so I wonder if there is a way to hide that.
All the best,
Christian
The issue was fixed in the latest oXygen build 2009102316 available from our download page: http://www.oxygenxml.com/download_oxygenxml_editor.html See also: http://www.oxygenxml.com/build_history.html#2009102316 Best Regards, George -- George Cristian Bina <oXygen/> XML Editor, Schema Editor and XSLT Editor/Debugger http://www.oxygenxml.com Octavian wrote:
Hello,
Thank you for reporting this problem. The users credentials should have been filtered from the system ids presented in results panel. We made the necessary fix and a new oXygen build will be available later today.
Best Regards, Octavian
An element with two leading blank spaces: <x> data</x> reformats to one: <x> data</x> I need to keep all leading white space within an element when reformatting. I had this working for version 10, but my update to version 11 has lost this ability. For the life of me, I cannot remember the preferences setting needed. Can anyone remind me? Thanks, Mark
Hi Mark, There is no change between version 10 and 11 related with handling of leading white spaces. To have the spaces preserved for your x element you can - add xml:space="preserve" on x - add x in the preserve space elements in Options->Preferences -- Editor / Format / XML Best Regards, George -- George Cristian Bina <oXygen/> XML Editor, Schema Editor and XSLT Editor/Debugger http://www.oxygenxml.com Mark Wilson wrote:
An element with two leading blank spaces: <x> data</x> reformats to one: <x> data</x>
I need to keep all leading white space within an element when reformatting. I had this working for version 10, but my update to version 11 has lost this ability. For the life of me, I cannot remember the preferences setting needed. Can anyone remind me? Thanks, Mark
_______________________________________________ oXygen-user mailing list oXygen-user@oxygenxml.com http://www.oxygenxml.com/mailman/listinfo/oxygen-user
Is it likely that Mark's xml space preservation settings were lost (not migrated) when he installed Oxygen 11? Lars On 10/23/2009 12:53 PM, George Cristian Bina wrote:
Hi Mark,
There is no change between version 10 and 11 related with handling of leading white spaces.
To have the spaces preserved for your x element you can - add xml:space="preserve" on x - add x in the preserve space elements in Options->Preferences -- Editor / Format / XML
Best Regards, George
Hi Lars, No, we just double checked that by removing version 11 options, setting an element in the preserve space list in version 10 and then starting version 11 and checking that the element appears in version 11 options. The initialization of version 11 options with the version 10 values happens only when there are no version 11 options. Otherwise the existing version 11 options are used. If someone changes options in version 10 after version 11 already created its set of options then those options will not be propagated to version 11 automatically. Best Regards, George -- George Cristian Bina <oXygen/> XML Editor, Schema Editor and XSLT Editor/Debugger http://www.oxygenxml.com Lars Huttar wrote:
Is it likely that Mark's xml space preservation settings were lost (not migrated) when he installed Oxygen 11? Lars
On 10/23/2009 12:53 PM, George Cristian Bina wrote:
Hi Mark,
There is no change between version 10 and 11 related with handling of leading white spaces.
To have the spaces preserved for your x element you can - add xml:space="preserve" on x - add x in the preserve space elements in Options->Preferences -- Editor / Format / XML
Best Regards, George
_______________________________________________ oXygen-user mailing list oXygen-user@oxygenxml.com http://www.oxygenxml.com/mailman/listinfo/oxygen-user
participants (5)
-
Christian Wittern -
George Cristian Bina -
Lars Huttar -
Mark Wilson -
Octavian