bitpiston / oyster

A Perl web application framework.
Other
3 stars 1 forks source link

?ssxslt=1 and JSON or plain text output for AJAX crash (XML parse error) #67

Closed einkoro closed 11 years ago

einkoro commented 11 years ago

Invoking ssxslt via GET can kill the fastcgi process entirely as it tries to parse the output via XSLT as XML when it was intended to be JSON or plain text with no XSLT.

Options: 1) Disable ssxslt as GET or POST input unless debug is enabled. 2) Always use XML with or without XSLT for AJAX output. See #66 (XML to JSON via XSLT) and #30 (separate ajax xsl from layout.xsl)

Or just print the buffer and don't parse the XML and XSLT if the handler is set to ajax.

See #70 (Proper error handling in SSXSLT)