Skip to content

Backslash (\) incorrectly treated as a path separator on Linux/macOS #138

@jameslan

Description

@jameslan

On Linux and macOS, the backslash () is a valid character in file names. However, when a URL containing a backslash appears in an XInclude or XSD import, it is treated as a path separator, causing the processor to access an unexpected file.

More importantly, this behavior could potentially be exploited to access internal system files, which poses a security risk.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    Status

    In Progress

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions