Re: NMAP XML Output

[David Fifield <david () bamsoftware com>]

On Wed, May 26, 2010 at 07:51:19PM -0700, Fyodor wrote:
> nmap -oX /t/crap/nmap.xml scanme.nmap.org
>
> And then I open up file:///t/crap/nmap.xml in firefox, I get a blank
> page.  View source shows the original XML.  The file includes:
>
> <?xml-stylesheet href="file:///usr/local/share/nmap/nmap.xsl" type="text/xsl"?>
>
> When I put that xsl file:// URL in the browser, I get the XSL as
> expected.  And it works (shows the proper Nmap output) with the same
> browser if I use --webxml and place the file on nmap.org as in
> http://nmap.org/tmp/nmap-webxml.xml.
>
> Does this sort of local XML file viewing work or not work for anyone
> else?  Anyone have an idea why?

I think that the XSL view has been broken for a while in Firefox because
of security settings that prevent the loading of external stylesheets.

"Re: Path to nmap.xsl for win32"
http://seclists.org/nmap-dev/2008/q3/1023

"Style sheet not processed if file is local and style sheet is remote"
https://bugzilla.mozilla.org/show_bug.cgi?id=228698

"Re: NMAP XML reports unreadable in linux"
http://seclists.org/nmap-dev/2006/q3/45

"Re: webxml is broken on Firefox"
http://seclists.org/nmap-dev/2010/q1/359

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/