Skip to content

Allow Insecure XSL Transforms

Key: qie.allowXslInsecureProcessing

Env Var: QIE_ALLOWXSLINSECUREPROCESSING

Default: false

Scope: Global

Description: Allows insecure XSL transformations, specifically the use of the java 'new' command in the transformation.

Examples

Env Var

QIE_ALLOWXSLINSECUREPROCESSING=true

Java Option

-Dqie.allowXslInsecureProcessing=true

YAML

QIE_ALLOWXSLINSECUREPROCESSING: true