BaseX-Talk

basex-talk@mailman.uni-konstanz.de

6 participants
5269 discussions

is this a bug?
by Rob Stapper 02 Nov '22

02 Nov '22

Hi, I stumbled upon this behavior. Is this a bug? I’m still using Basex version 9.7. Code[1]: let $e := <E>abc</E> update { replace value of node . with ./data() || "def" } return ( $e, $e/data() ) Result: <E>abcdef</E> abc Expecting: <E>abcdef</E> abcdef [1] attachment: “replace-value-of-bug.xq” Pleased to hear from you, Rob Stapper Sent from Mail for Windows -- This email has been checked for viruses by Avast antivirus software. www.avast.com

2 1

Full-text bug (?) - all words / any word + stemming
by Hans-Juergen Rennau 28 Oct '22

28 Oct '22

Hello, I encountered a behaviour of full-text search which appears to me a bug: (1) OKbasex "'adverse' contains text 'adverse' using stemming" => true (2) NOTOKbasex "'adverse' contains text 'adverse' all words using stemming"=> false (3) NOTOKbasex "'adverse' contains text 'adverse' any word using stemming" => false (4) OK basex "'fox' contains text 'fox' any word using stemming" => true BaseX version is 10.3. With kind regards,Hans-Jürgen

2 1

Client auth debugging
by Erik Peterson 28 Oct '22

28 Oct '22

I'm implementing a client per basex api shown here: https://docs.basex.org/wiki/Server_Protocol#Authentication I'm working on digest auth and I can get back the realm and timestamp. I'm getting an access denied however when I send the username and token. My questions are: 1) What tips are there for debugging authentication implementation? I've set logs.debug to true in .basex and and tail them. I can see access denied but there's no info to help me debug. I'd like to at least see what the server is receiving. Any way to do that? BTW, my token creation is correct per the example in the docs. 2) It's taking a long time, 60s, for the test to run. Any way to speed that up?

3 2

xqDoc - potential updates
by Loren Cahlander 24 Oct '22

24 Oct '22

Hello folks, I am looking at maybe doing some updates to the xqDoc spec and the codebase. I have code that transforms the xqDoc resources with RestXQ into an OpenAPI 3 API documentation. The things that I want to figure out is: Figure out how to specify the schema of the parameters and the return Document the various HTTP return codes and the response content for each return code I would like to get the input from everyone using xqDoc Thank you, Loren

3 2

Lookup operator, conformance
by Hans-Jürgen Rennau 24 Oct '22

24 Oct '22

Hello, I noticed that the lookup operator (?) accepts as key expression also non-parenthesized expressions, e.g.: $map?$key It seems to me that the XQuery spec does not allow that - the key specifier must be an NCName, an integer, * or a parenthesized expression [1]: [126] KeySpecifier ::= NCName | IntegerLiteral | ParenthesizedExpr | "*" So only this should be allowed: $map?($key) But I am not quite sure if I do not overlook something. *My question*: is the acceptance of non-parenthesized key expressions conformant behaviour, or a (certainly intended) laxness? Kind regards, Hans-Jürgen [1] https://www.w3.org/TR/xquery-31/#id-lookup

2 2

How to check if a node is from a database
by Hans-Jürgen Rennau 08 Oct '22

08 Oct '22

Dear BaseX people, what would be an efficient way of checking if a given node is a database node? According to the documentation, function db:name() throws an error if the node is not a database node. However, that is not what I observe.(The same applies to db:node-id(), db:node-pre(), db:path()). Therefore I resorted to this way of checking: try {db:name($node) ! db:exists(.)} catch * {false()} That is clumsy and unreliable: if applied to a node in a file, db:name() returns the base name of the file, which might accidentally be a database name. What would you recommend instead? Kind regards, Hans-Jürgen

2 1

ft:mark and differing result sets on 10.2
by Chris Yocum 05 Oct '22

05 Oct '22

Hi, I had a chance to come back to basex after a while when I needed to do some querying on my data set. I updated to 10.2 and loaded the files. This was all fine. I then ran this query: for $x in db:get($db)/sample/entry return ft:mark($x[descendant::text() contains text {'fas'} using wildcards]) which ran in 2528.78ms and return 170 results. This seemed rather slow so I started to work on it. I also ran this: for $x in db:get($db)/sample/entry return $x[descendant::text() contains text {'fas'} using wildcards] which ran in 57.77ms and returned 35 results. I was very suprised by this as I had expected it to run in the same time and return the same result set. I, then, started look deeper and it seems like ft:mark does more than add an XML tag around the matched token? My question is this: does ft:mark do more than what I had expected it to do? Am I misunderstanding or miswriting this query? Thank you and all the best, Chris

3 3

Vulnerabilities in docker image
by Huib Verweij 05 Oct '22

05 Oct '22

Hi, we have built a docker image based on the 10.1 war (and 10.2 war). In Harbor, part of the OpenShift K8s platform that we use, the image is scanned for vulnerabilities. There are quite a few Criticals and Highs! Here’s a list of the most pressing CVEs: CVE package version Fixed in version ================================================================== CVE-2013-7285 com.thoughtworks.xstream:xstream 1.4.2 1.4.7 CVE-2021-21342 com.thoughtworks.xstream:xstream 1.4.2 1.4.16 and 5 more Criticals and a lot more Highs in XStream. There’s also a High in JDOM: CVE-2021-33813 org.jdom:jdom 1.1 The Aqua-Trivy plugin for the Docker Desktop-app reports the same CVEs. Especially the Criticals that are (presumably) easy to fix by upgrading the XStream package are in the way of deployment. Our image is based on tomcat:9-jre17-temurin, when I leave out the BaseX stuff it has just two Low CVEs. Btw, an up to date docker image on Docker Hub would be much appreciated. If it’s also available for the linux/arm64/v8 architecture that would be perfect! Kind regards, Huib.

2 1

Indent result for unit tests
by Tim Thompson 05 Oct '22

05 Oct '22

Hello, I've noticed that the "Indent results" button in the GUI does not seem to be working when running a test module from the GUI. I'm using BaseX 10.3 beta. All best, Tim -- Tim A. Thompson (he, him) Librarian for Applied Metadata Research Yale University Library www.linkedin.com/in/timathompson

2 1

Error: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.
by ykhabins＠bellsouth.net 30 Sep '22

30 Sep '22

Hello, I am using BaseX v.10.2 More specifically launching basexserver.bat and using c# samples from the following link: https://github.com/BaseXdb/basex/tree/9/basex-api/src/main/c%23 Everything is work fine when a computer with the Windows 10 OS has the following security policy disabled: System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing https://docs.trendmicro.com/all/ent/sc/v3.0/en-US/cmcolh/t_fips.html Alas, I am working for the company where that security policy is enabled. And I am getting the following error: "This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms." This particular function is erroring out. private string MD5(string input) { MD5CryptoServiceProvider MD5 = new MD5CryptoServiceProvider(); ... } I did some research and collected the following useful links: https://stackoverflow.com/questions/14509354/this-implementation-is-not-part -of-the-windows-platform-fips-validated-cryptogra https://docs.trendmicro.com/all/ent/sc/v3.0/en-US/cmcolh/t_fips.html https://stackoverflow.com/questions/6652850/enforcefipspolicy-flag-in-web-co nfig-doesnt-seem-to-working-for-web-application https://techcommunity.microsoft.com/t5/microsoft-security-baselines/why-we-a mp-8217-re-not-recommending-amp-8220-fips-mode-amp-8221/ba-p/701037 I also tried to add the following to the .config file to no avail: <configuration> <runtime> <enforceFIPSPolicy enabled="0" /> </runtime> </configuration> Is it possible to modify c# samples to work on the computers where mentioned above security poilsy is enabled? Regards, Yitzhak Khabinsky

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

BaseX-Talk