spring/spring-framework
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-framework.git synced 2026-09-17 16:39:29 +00:00
Code Issues Projects Releases Wiki Activity

Apply ResourceHandlerUtils checks in XsltView

Browse Source 
Closes gh-37029
This commit is contained in:
rstoyanchev
2026-08-14 09:11:50 +02:00
committed by Brian Clozel
parent 8647e90bc7
commit 692dbc9160
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
spring-webmvc/src/main/java/org/springframework/web/servlet/view/xslt/XsltView.java
+6 -2
View File
@@ -53,6 +53,7 @@ import org.springframework.util.ReflectionUtils;
import org.springframework.util.StringUtils;
import org.springframework.util.xml.SimpleTransformErrorListener;
import org.springframework.util.xml.TransformerUtils;
import org.springframework.web.servlet.resource.ResourceHandlerUtils;
import org.springframework.web.servlet.view.AbstractUrlBasedView;
import org.springframework.web.util.WebUtils;
@@ -457,12 +458,15 @@ public class XsltView extends AbstractUrlBasedView {
protected Source getStylesheetSource() {
String url = getUrl();
Assert.state(url != null, "'url' not set");
if (logger.isDebugEnabled()) {
logger.debug("Applying stylesheet [" + url + "]");
}
String location = ResourceHandlerUtils.normalizeInputPath(url);
if (ResourceHandlerUtils.shouldIgnoreInputPath(location)) {
throw new ApplicationContextException("Invalid XSLT stylesheet location '" + url + "'");
}
try {
Resource resource = obtainApplicationContext().getResource(url);
Resource resource = obtainApplicationContext().getResource(location);
return new StreamSource(resource.getInputStream(), resource.getURI().toASCIIString());
}
catch (IOException ex) {