{"record":{"id":"d1eb8418e0f268bd","repo":"nginx/nginx","slug":"ngx-log-warn-d1eb84","errorCode":"NGX_LOG_WARN","errorMessage":"xslt filter external entity ignored: \\\"%s\\\" \\\"%s\\\" \\\"%s\\\"","messagePattern":"xslt filter external entity ignored: \\\\\"(.+?)\\\\\" \\\\\"(.+?)\\\\\" \\\\\"(.+?)\\\\\"","errorType":"console","errorClass":null,"httpStatus":null,"severity":"error","filePath":"src/http/modules/ngx_http_xslt_filter_module.c","lineNumber":515,"sourceCode":"    ngx_log_debug3(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,\n                   \"xslt filter entityDecl: \\\"%s\\\" \\\"%s\\\" \\\"%s\\\"\",\n                   name ? name : (xmlChar *) \"\",\n                   publicId ? publicId : (xmlChar *) \"\",\n                   systemId ? systemId : (xmlChar *) \"\");\n\n    conf = ngx_http_get_module_loc_conf(r, ngx_http_xslt_filter_module);\n\n    if (systemId && !conf->external_entities) {\n\n        /*\n         * If external entiries in the internal DTD subset are disabled,\n         * we remove system identifiers from such entities.  This makes sure\n         * that external entities cannot be used to directly request arbitrary\n         * files, but still can be used with public identifiers, assuming these\n         * are included into XML catalogs on the system.\n         */\n\n        ngx_log_error(NGX_LOG_WARN, r->connection->log, 0,\n                      \"xslt filter external entity ignored: \"\n                      \"\\\"%s\\\" \\\"%s\\\" \\\"%s\\\"\",\n                      name ? name : (xmlChar *) \"\",\n                      publicId ? publicId : (xmlChar *) \"\",\n                      systemId ? systemId : (xmlChar *) \"\");\n\n        if (publicId) {\n            xmlSAX2EntityDecl(data, name, type, publicId, (xmlChar *) \"\",\n                              content);\n\n        } else if (type == XML_EXTERNAL_GENERAL_PARSED_ENTITY) {\n            xmlSAX2EntityDecl(data, name, XML_INTERNAL_GENERAL_ENTITY,\n                              NULL, NULL, (xmlChar *) \"\");\n\n        } else if (type == XML_EXTERNAL_PARAMETER_ENTITY) {\n            xmlSAX2EntityDecl(data, name, XML_INTERNAL_PARAMETER_ENTITY,\n                              NULL, NULL, (xmlChar *) \"\");\n        }","sourceCodeStart":497,"sourceCodeEnd":533,"githubUrl":"https://github.com/nginx/nginx/blob/3f6f7824d4e2eb1ac37dec76683d525ac0ff521c/src/http/modules/ngx_http_xslt_filter_module.c#L497-L533","documentation":"Error \"xslt filter external entity ignored: \\\"%s\\\" \\\"%s\\\" \\\"%s\\\"\" thrown in nginx/nginx.","triggerScenarios":"Thrown at src/http/modules/ngx_http_xslt_filter_module.c:515 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"3f6f7824d4e2eb1ac37dec76683d525ac0ff521c","analyzedAt":"2026-08-22T03:09:46.447Z","schemaVersion":2},"datasetVersion":"2026-08-22T04:17:13.399Z"}