← Back to branch summary

~ubuntu-branches/ubuntu/dapper/awstats/dapper-security

« back to all changes in this revision

Viewing changes to tools/xslt/awstats61.xsd

  • Committer: Bazaar Package Importer
  • Author(s): Jonas Smedegaard
  • Date: 2005-02-05 17:13:48 UTC
  • mfrom: (1.1.1 upstream)
  • Revision ID: james.westby@ubuntu.com-20050205171348-h8uy32bhbcnhciie
Tags: 6.3-1
http://bugs.debian.org/293702
http://bugs.debian.org/293668
http://bugs.debian.org/291064
http://bugs.debian.org/294488
* New upstream release. Closes: bug#293702, #293668 (thanks to Nelson
  A. de Oliveira <naoliv@biolinux.df.ibilce.unesp.br>).
  + Includes upstream fix for security bug fixed in 6.2-1.1.
  + Includes upstream fix for most of security bug fixed in 6.2-1.1.
* Acknowledge NMUs. Closes: bug#291064, #294488 (thanks to Martin
  Schulze <joey@infodrom.org>, Martin Pitt <mpitt@debian.org>, Ubuntu,
  Joey Hess <joeyh@debian.org>, Frank Lichtenheld <djpig@debian.org> and Steve
  Langasek <vorlon@debian.org>).
* Include patch for last parts of security bug fixed in 6.2-1.1:
  01_sanitize_more.patch.
* Patch (02) to include snapshot of recent development:
  + Fix security hole that allowed a user to read log file content
    even when plugin rawlog was not enabled.
  + Fix a possible use of AWStats for a DoS attack.
  + configdir option was broken on windows servers.
  + DebugMessages is by default set to 0 for security reasons.
  + Minor fixes.
* References:
  CAN-2005-0435 - read server logs via loadplugin and pluginmode
  CAN-2005-0436 - code injection via PluginMode
  CAN-2005-0437 - directory traversal via loadplugin
  CAN-2005-0438 - information leak via debug

Show diffs side-by-side

added added

removed removed

Lines of Context:
tools/xslt/awstats61.xsd
 
1
<?xml version="1.0" encoding="UTF-8"?>
 
2
<!-- edited with XMLSPY v2004 rel. 2 U (http://www.xmlspy.com) by Nobody (None) -->
 
3
<!--W3C Schema generated by XMLSPY v2004 rel. 2 U (http://www.xmlspy.com)-->
 
4
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" elementFormDefault="qualified">
 
5
        <xs:element name="comment" type="xs:string"/>
 
6
        <xs:element name="lib" type="xs:string"/>
 
7
        <xs:element name="nu" type="xs:string"/>
 
8
        <xs:element name="recnb">
 
9
                <xs:simpleType>
 
10
                        <xs:restriction base="xs:byte">
 
11
                                <xs:enumeration value="0"/>
 
12
                                <xs:enumeration value="1"/>
 
13
                                <xs:enumeration value="2"/>
 
14
                                <xs:enumeration value="24"/>
 
15
                                <xs:enumeration value="28"/>
 
16
                                <xs:enumeration value="3"/>
 
17
                                <xs:enumeration value="5"/>
 
18
                                <xs:enumeration value="6"/>
 
19
                                <xs:enumeration value="7"/>
 
20
                                <xs:enumeration value="8"/>
 
21
                                <xs:enumeration value="9"/>
 
22
                        </xs:restriction>
 
23
                </xs:simpleType>
 
24
        </xs:element>
 
25
        <xs:element name="section">
 
26
                <xs:complexType>
 
27
                        <xs:choice maxOccurs="unbounded">
 
28
                                <xs:element ref="comment"/>
 
29
                                <xs:element ref="nu"/>
 
30
                                <xs:element ref="recnb"/>
 
31
                                <xs:element ref="table"/>
 
32
                                <xs:element ref="sortfor"/>
 
33
                        </xs:choice>
 
34
                        <xs:attribute name="id" use="required">
 
35
                                <xs:simpleType>
 
36
                                        <xs:restriction base="xs:NMTOKEN">
 
37
                                                <xs:enumeration value="browser"/>
 
38
                                                <xs:enumeration value="cluster"/>
 
39
                                                <xs:enumeration value="day"/>
 
40
                                                <xs:enumeration value="domain"/>
 
41
                                                <xs:enumeration value="emailreceiver"/>
 
42
                                                <xs:enumeration value="emailsender"/>
 
43
                                                <xs:enumeration value="errors"/>
 
44
                                                <xs:enumeration value="extra_1"/>
 
45
                                                <xs:enumeration value="filetypes"/>
 
46
                                                <xs:enumeration value="general"/>
 
47
                                                <xs:enumeration value="header"/>
 
48
                                                <xs:enumeration value="keywords"/>
 
49
                                                <xs:enumeration value="login"/>
 
50
                                                <xs:enumeration value="misc"/>
 
51
                                                <xs:enumeration value="origin"/>
 
52
                                                <xs:enumeration value="os"/>
 
53
                                                <xs:enumeration value="pagerefs"/>
 
54
                                                <xs:enumeration value="robot"/>
 
55
                                                <xs:enumeration value="screensize"/>
 
56
                                                <xs:enumeration value="searchwords"/>
 
57
                                                <xs:enumeration value="sereferrals"/>
 
58
                                                <xs:enumeration value="session"/>
 
59
                                                <xs:enumeration value="sider"/>
 
60
                                                <xs:enumeration value="sider_404"/>
 
61
                                                <xs:enumeration value="time"/>
 
62
                                                <xs:enumeration value="unknownreferer"/>
 
63
                                                <xs:enumeration value="unknownrefererbrowser"/>
 
64
                                                <xs:enumeration value="visitor"/>
 
65
                                                <xs:enumeration value="worms"/>
 
66
                                        </xs:restriction>
 
67
                                </xs:simpleType>
 
68
                        </xs:attribute>
 
69
                </xs:complexType>
 
70
        </xs:element>
 
71
        <xs:element name="sortfor">
 
72
                <xs:simpleType>
 
73
                        <xs:restriction base="xs:byte">
 
74
                                <xs:enumeration value="10"/>
 
75
                                <xs:enumeration value="20"/>
 
76
                                <xs:enumeration value="5"/>
 
77
                        </xs:restriction>
 
78
                </xs:simpleType>
 
79
        </xs:element>
 
80
        <xs:element name="table">
 
81
                <xs:complexType mixed="true">
 
82
                        <xs:choice minOccurs="0" maxOccurs="unbounded">
 
83
                                <xs:element ref="tr"/>
 
84
                        </xs:choice>
 
85
                </xs:complexType>
 
86
        </xs:element>
 
87
        <xs:element name="td" type="xs:string"/>
 
88
        <xs:element name="tr">
 
89
                <xs:complexType>
 
90
                        <xs:sequence>
 
91
                                <xs:element ref="td" maxOccurs="unbounded"/>
 
92
                        </xs:sequence>
 
93
                </xs:complexType>
 
94
        </xs:element>
 
95
        <xs:element name="version">
 
96
                <xs:complexType>
 
97
                        <xs:sequence>
 
98
                                <xs:element ref="lib"/>
 
99
                                <xs:element ref="comment"/>
 
100
                        </xs:sequence>
 
101
                </xs:complexType>
 
102
        </xs:element>
 
103
        <xs:element name="xml">
 
104
                <xs:complexType>
 
105
                        <xs:sequence>
 
106
                                <xs:element ref="version"/>
 
107
                                <xs:element ref="section" maxOccurs="unbounded"/>
 
108
                        </xs:sequence>
 
109
                </xs:complexType>
 
110
        </xs:element>
 
111
</xs:schema>