BaseX-Talk October 2022

basex-talk@mailman.uni-konstanz.de

12 participants
11 discussions

BaseX 9.6: The Summer Edition
by Christian Grün 28 Nov '24

28 Nov '24

Dear all, We provide you with a new and fresh version of BaseX, our open source XML framework, database system and XQuery 3.1 processor: https://basex.org/ Apart from our main focus (query rewritings and optimizations), we have added the following enhancements: XQUERY: MODULES, FEATURES - Archive Module, archive:write: stream large archives to file - SQL Module: support for more SQL types - Full-Text Module, ft:thesaurus: perform Thesaurus queries - Fulltext, fuzzy search: specify Levenshtein limit - UNROLLLIMIT option: control limit for unrolling loops XQUERY: JAVA BINDINGS - Java objects of unknown type are wrapped into function items - results of constructor calls are returned as function items - the standard package "java.lang." has become optional - array arguments can be specified with the middle dot notation - conversion can be controlled with the WRAPJAVA option - better support for XQuery arrays and maps WEB APPLICATIONS - RESTXQ: Server-Timing HTTP headers are attached to the response For a more comprehensive list of added and updated features, look into our documentation (docs.basex.org) and check out the GitHub issues (github.com/BaseXdb/basex/issues). Have fun, Your BaseX Team

11 43

recursively used variables
by Rob Stapper 12 Aug '24

12 Aug '24

Hi, The code[1] below and send as attachment generates a error message: “Static variable depends on itself: $Q{http://www.w3.org/2005/xquery-local-functions}test”. I use these variables to refer to my private functions in my modules so I can easyly refer to them in a inheritance situation. It’s not a big problem for me but I was wondering if the error-triggering is justified or that it should work. [1]=========================================== declare variable $local:test := local:test#1 ; declare %private function local:test( $i) { if ( $i > 0) then $local:test( $i - 1) } ; $local:test( 10) =========================================== Kind regards, Rob Stapper Sent from Mail for Windows 10 -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

4 7

xslt:transform-report result
by Andy Bunce 11 Mar '24

11 Mar '24

Hi, Using BaseX 9.7.1 and saxon9he-9.9.1.jar The documentation suggests the ?result from xslt:transform-report should be *a* document-node where possible [1] This seems not quite to be the case when there are processing instructions or comments at the top level. In these cases a sequence of document-nodes is returned. /Andy [1] https://docs.basex.org/wiki/XSLT_Module#xslt:transform-report let $xslt:=<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="3.0"> <xsl:mode on-no-match="shallow-copy"/> </xsl:stylesheet> let $xml:=document{ <?something type="compact"?>, <foo/>} return xslt:transform-report($xml,$xslt) Returns map { "messages": (), "result": (<?something type="compact"?>, <foo/>) }

3 7

Full-text bug (?) - all words / any word + stemming
by Hans-Juergen Rennau 28 Oct '22

28 Oct '22

Hello, I encountered a behaviour of full-text search which appears to me a bug: (1) OKbasex "'adverse' contains text 'adverse' using stemming" => true (2) NOTOKbasex "'adverse' contains text 'adverse' all words using stemming"=> false (3) NOTOKbasex "'adverse' contains text 'adverse' any word using stemming" => false (4) OK basex "'fox' contains text 'fox' any word using stemming" => true BaseX version is 10.3. With kind regards,Hans-Jürgen

2 1

Client auth debugging
by Erik Peterson 28 Oct '22

28 Oct '22

I'm implementing a client per basex api shown here: https://docs.basex.org/wiki/Server_Protocol#Authentication I'm working on digest auth and I can get back the realm and timestamp. I'm getting an access denied however when I send the username and token. My questions are: 1) What tips are there for debugging authentication implementation? I've set logs.debug to true in .basex and and tail them. I can see access denied but there's no info to help me debug. I'd like to at least see what the server is receiving. Any way to do that? BTW, my token creation is correct per the example in the docs. 2) It's taking a long time, 60s, for the test to run. Any way to speed that up?

3 2

xqDoc - potential updates
by Loren Cahlander 24 Oct '22

24 Oct '22

Hello folks, I am looking at maybe doing some updates to the xqDoc spec and the codebase. I have code that transforms the xqDoc resources with RestXQ into an OpenAPI 3 API documentation. The things that I want to figure out is: Figure out how to specify the schema of the parameters and the return Document the various HTTP return codes and the response content for each return code I would like to get the input from everyone using xqDoc Thank you, Loren

3 2

Lookup operator, conformance
by Hans-Jürgen Rennau 24 Oct '22

24 Oct '22

Hello, I noticed that the lookup operator (?) accepts as key expression also non-parenthesized expressions, e.g.: $map?$key It seems to me that the XQuery spec does not allow that - the key specifier must be an NCName, an integer, * or a parenthesized expression [1]: [126] KeySpecifier ::= NCName | IntegerLiteral | ParenthesizedExpr | "*" So only this should be allowed: $map?($key) But I am not quite sure if I do not overlook something. *My question*: is the acceptance of non-parenthesized key expressions conformant behaviour, or a (certainly intended) laxness? Kind regards, Hans-Jürgen [1] https://www.w3.org/TR/xquery-31/#id-lookup

2 2

How to check if a node is from a database
by Hans-Jürgen Rennau 08 Oct '22

08 Oct '22

Dear BaseX people, what would be an efficient way of checking if a given node is a database node? According to the documentation, function db:name() throws an error if the node is not a database node. However, that is not what I observe.(The same applies to db:node-id(), db:node-pre(), db:path()). Therefore I resorted to this way of checking: try {db:name($node) ! db:exists(.)} catch * {false()} That is clumsy and unreliable: if applied to a node in a file, db:name() returns the base name of the file, which might accidentally be a database name. What would you recommend instead? Kind regards, Hans-Jürgen

2 1

ft:mark and differing result sets on 10.2
by Chris Yocum 05 Oct '22

05 Oct '22

Hi, I had a chance to come back to basex after a while when I needed to do some querying on my data set. I updated to 10.2 and loaded the files. This was all fine. I then ran this query: for $x in db:get($db)/sample/entry return ft:mark($x[descendant::text() contains text {'fas'} using wildcards]) which ran in 2528.78ms and return 170 results. This seemed rather slow so I started to work on it. I also ran this: for $x in db:get($db)/sample/entry return $x[descendant::text() contains text {'fas'} using wildcards] which ran in 57.77ms and returned 35 results. I was very suprised by this as I had expected it to run in the same time and return the same result set. I, then, started look deeper and it seems like ft:mark does more than add an XML tag around the matched token? My question is this: does ft:mark do more than what I had expected it to do? Am I misunderstanding or miswriting this query? Thank you and all the best, Chris

3 3

Vulnerabilities in docker image
by Huib Verweij 05 Oct '22

05 Oct '22

Hi, we have built a docker image based on the 10.1 war (and 10.2 war). In Harbor, part of the OpenShift K8s platform that we use, the image is scanned for vulnerabilities. There are quite a few Criticals and Highs! Here’s a list of the most pressing CVEs: CVE package version Fixed in version ================================================================== CVE-2013-7285 com.thoughtworks.xstream:xstream 1.4.2 1.4.7 CVE-2021-21342 com.thoughtworks.xstream:xstream 1.4.2 1.4.16 and 5 more Criticals and a lot more Highs in XStream. There’s also a High in JDOM: CVE-2021-33813 org.jdom:jdom 1.1 The Aqua-Trivy plugin for the Docker Desktop-app reports the same CVEs. Especially the Criticals that are (presumably) easy to fix by upgrading the XStream package are in the way of deployment. Our image is based on tomcat:9-jre17-temurin, when I leave out the BaseX stuff it has just two Low CVEs. Btw, an up to date docker image on Docker Hub would be much appreciated. If it’s also available for the linux/arm64/v8 architecture that would be perfect! Kind regards, Huib.

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

BaseX-Talk October 2022