Subject: [bug#32947] Add java-xalan.

From: Maxime Devos <[email-masked]>
Date: Wed, 30 Mar 2022 19:43:59 +0200

Maxime Devos schreef op vr 18-03-2022 om 21:07 [+0100]:
> (I'm currently at
> xalan-j_2_7_2/src/org/apache/xalan/templates/FuncKey.java, 25%).

I've continued reading and I'm now at xalan-
j_2_7_2/src/org/apache/xalan/xsltc/dom/DocumentCache.java, 49%.

I think I see a bug there, in getStatistics:

	    out.print("<tr><td><a href=\""+_URIs[i]+"\">"+
		      "<font size=-1>"+_URIs[i]+"</font></a></td>");

what if the URI contains &, <, > or " characters?  Looks like then the
XML would be malformed.  To be reported upstream ... (not a blocker,
since xsltc is unused in the Guix package)

Greetings,
Maxime.