Bug #53063 [Com]: <xsl:include> and <xsl:import> are broken

Edit report at https://bugs.php.net/bug.php?id=53063&edit=1 ID: 53063 Comment by: r3wald at gmail dot com Reported by: robin2008 at altruists dot org Summary: <xsl:include> and <xsl:import> are broken Status: Feedback Type: Bug Package: XSLT related Operating System: Ubuntu 10.04 PHP Version: 5.3.3 Block user comment: N Private report: N New Comment: Ditto. No problems anymore. Previous Comments: ------------------------------------------------------------------------ [2013-12-02 13:32:23] mike@php.net Cannot reproduce. ------------------------------------------------------------------------ [2010-12-02 09:30:46] r3wald at gmail dot com Please have a look at: http://bugs.php.net/bug.php?id=52257 . I had exactly the same issue as you have. Disabling redland.so finally resolved it. Robert ------------------------------------------------------------------------ [2010-10-14 08:37:01] robin2008 at altruists dot org Description: ------------ Somewhere between 5.3.0 and 5.3.2, the security model for XSL has been over tightened. XSL stylesheets which refer to other stylesheet by <xsl:import> or <xsl:include> now fail to work. Test script: --------------- <?php // PHP 5.3.2 XSLT BUG - <xsl:import> (and <xsl:include>) are broken $aDOM= new DOMDocument(); $aDOM->loadXML('<?xml version="1.0"?><etc/>'); $stylesheet= new DOMDocument(); $proc= new XSLTProcessor(); $stylesheet->loadXML('<?xml version="1.0"?><stylesheet version="1.0" xmlns="http://www.w3.org/1999/XSL/Transform"><import href="somesheet.xslt"/><template match="/"/></stylesheet>'); $proc->importStyleSheet($stylesheet); $oops= $proc->transformToDoc($aDOM); ?> Expected result: ---------------- Assuming there is a valid stylesheet at "somesheet.xslt", the transform should work as per the W3C spec. Am I missing something? Is there, for example, a way to set this security default somewhere? Or a class method for XSLTProcessor to disable this? Actual result: -------------- Warning: XSLTProcessor::importStylesheet() [xsltprocessor.importstylesheet]: error in /home/robin/f2f/hardcode/xsl-import.php on line 10 Warning: XSLTProcessor::importStylesheet() [xsltprocessor.importstylesheet]: Local file read for /home/robin/f2f/hardcode/somesheet.xslt refused in /home/robin/f2f/hardcode/xsl-import.php on line 10 Warning: XSLTProcessor::importStylesheet() [xsltprocessor.importstylesheet]: error in /home/robin/f2f/hardcode/xsl-import.php on line 10 Warning: XSLTProcessor::importStylesheet() [xsltprocessor.importstylesheet]: xsl:import: read rights for /home/robin/f2f/hardcode/somesheet.xslt denied in /home/robin/f2f/hardcode/xsl-import.php on line 10 Warning: XSLTProcessor::transformToDoc() [xsltprocessor.transformtodoc]: No stylesheet associated to this object in /home/robin/f2f/hardcode/xsl-import.php on line 11 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=53063&edit=1