Template:DoctypeDisallowed

From Documentation
Revision as of 04:01, 19 January 2024 by Matthieu (talk | contribs) (Created page with "== DOCTYPE restriction == {{versionSince|10.0.0}} Starting from ZK 10, the xml parser used by ZK declares <code>disallow-doctype-decl</code> to true. This prevents the use of...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

DOCTYPE restriction

Since 10.0.0 Starting from ZK 10, the xml parser used by ZK declares disallow-doctype-decl to true. This prevents the use of DOCTYPE declaration in xml files, such as zk.xml, lang-addon.xml, config. xml, etc. This is a security measure to prevent XXE attacks using <!DOCTYPE ...> as vector.