JSP taglib for XSLT transform doesn't allow most attributes on elements

Solution Verified - Updated

Environment

  • Red Hat JBoss Enterprise Application Platform (EAP)
    • 6.4.6
    • 6.4.7
    • 6.4.8

Issue

  • javax.xml.transform.TransformerException: "xxxxx" attribute is not allowed on the xxxxx element!
  • Using <x:transform xml="${xmltext}" xslt="${xslt}"></x:transform> with XSLT which creates elements with attributes will give an error on JBoss EAP 6.4.6 while the same code worked in previous version.

Resolution

Upgrade to EAP 6.4 CP 9.

Root Cause

CVE-2015-0254 enabled secure mode processing for the XSL taglib. However, secure mode was overly restrictive. This content is not included.bug 1312318 has resolved this issue.

SBR
Product(s)
Category
Tags

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.