PhoenixmlDb.Core
LocalFileResourceResolver
Default implementation: resolves file: (local filesystem) URIs directly and, unless is set, blocks any other scheme (e.g. http:, https:) as a security precaution against server-side-request-forgery via xi:include href.
#LocalFileResourceResolver
Namespace: PhoenixmlDb.Core.Xml
Default
implementation: resolves
file:
(local filesystem) URIs directly and, unless
is set, blocks any other scheme (e.g.
http:
,
https:
) as a security precaution against server-side-request-forgery via
xi:include href
.
#Properties
| Name | Description |
|---|---|
AllowRemote
|
Whether non-local (e.g. http:/https:) URIs may be fetched. Defaults to false.
|
MaxResourceBytes
|
Maximum size (characters for XML, bytes for text) of a single resolved resource; <= 0 = unlimited. An oversized resource surfaces as a resource error (fallback-eligible).
|
#Methods
#ResolveText(Uri,String,String,String)
#ResolveXml(Uri)
#Fields
| Name | Description |
|---|---|
RemoteTextClient
|
Shared client for the (opt-in) AllowRemote parse="text" fetch. Auto-redirect is disabled so an allowed fetch cannot be bounced to an unintended host (e.g. a cloud metadata endpoint), and a bounded timeout prevents a hung remote from stalling the caller.
|