No create permission error in BaseX fiddle on HTTP(S) request

Hi folks,

today when trying HTTP(S) requests in the BaseX fiddle like e.g.

json-doc('https://martin-honnen.github.io/xslt/2024/sample1.json')

I get an error

No create permission: json-doc("https://martin-honnen.github.io/xslt/2024/sample1.json")

Is that some intended restriction/limitation of the fiddle or some bug/quirk that has slipped in?

Hi Martin,

Is that some intended restriction/limitation of the fiddle

Exactly: Due to security concerns, many functions that access or modify external resources are blocked. In particular, the 'permission' option of xquery:eval (which is used to evaluate the user input) is set to 'none' [1].

Hope this helps, Christian

[1] https://docs.basex.org/main/XQuery_Functions#xquery:eval