No create permission error in BaseX fiddle on HTTP(S) request
Friday, 3 January 2025 · 2 messages
MH
Martin Honnen3 Jan 2025 10:40 #
Hi folks,
today when trying HTTP(S) requests in the BaseX fiddle like e.g.
json-doc('https://martin-honnen.github.io/xslt/2024/sample1.json')
I get an error
No create permission:
json-doc("https://martin-honnen.github.io/xslt/2024/sample1.json")
Is that some intended restriction/limitation of the fiddle or some bug/quirk that has slipped in?
CG
Christian Grün3 Jan 2025 14:15 #
Hi Martin,
Is that some intended restriction/limitation of the fiddle
Exactly: Due to security concerns, many functions that access or modify external resources are blocked. In particular, the 'permission' option of
xquery:eval (which is used to evaluate the user input) is set to 'none' [1].
Hope this helps,
Christian
[1] https://docs.basex.org/main/XQuery_Functions#xquery:evalWritten for BaseX 11.6. BaseX may have changed since: please check the current documentation.
⚡Generated with XQuery