<div dir="ltr">Hi,<div><br></div><div>Ok, I understand and agree with this security issue.</div><div><br></div><div>However, I still have problems with the WFS service file. </div><div><br></div><div>This works perfectly:</div><div><br></div><div>    ogrinfo WFS:<a href="https://geodata.tampere.fi/geoserver/wfs?typename=maankaytto:KAAVAYKSIKOT_ALUE_MVIEW">https://geodata.tampere.fi/geoserver/wfs?typename=maankaytto:KAAVAYKSIKOT_ALUE_MVIEW</a> -al -so --config OGR_WFS_PAGING_ALLOWED OFF</div><div><br></div><div>Without 

OGR_WFS_PAGING_ALLOWED, I got some HTTP 400 errors.</div><div><br></div><div>I create WFS Service file (tre_wfs.xml):</div><div><br></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><OGRWFSDataSource></div><div>  <URL><a href="https://geodata.tampere.fi/geoserver/wfs?typename=maankaytto:KAAVAYKSIKOT_ALUE_MVIEW">https://geodata.tampere.fi/geoserver/wfs?typename=maankaytto:KAAVAYKSIKOT_ALUE_MVIEW</a></URL></div><div>  <PagingAllowed>OFF</PagingAllowed></div><div></OGRWFSDataSource></div></blockquote><div><br></div><div>When I run this service file with ogrinfo:</div><div><br></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div>ogrinfo -ro tre_wfs.xml -al -so</div></blockquote><div><br></div>I also got those HTTP 400 errors. However, if I add config parameter:<div><br></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div>ogrinfo -ro tre_wfs.xml -al -so --config OGR_WFS_PAGING_ALLOWED OFF</div></blockquote><div><div><br></div><div>It works, I'm confused.</div><div><br></div><div>Rgs,</div><div><br></div><div>Pekka<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p><br></p></div></div></div></div></div></div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">ti 14. kesäk. 2022 klo 15.52 Even Rouault (<a href="mailto:even.rouault@spatialys.com">even.rouault@spatialys.com</a>) kirjoitti:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
  
    
  
  <div>
    <p>Hi,</p>
    <p>It is not possible to set configuration options in VRT files.
      There could potentially be security issues in doing so and reading
      untrusted VRT.</p>
    <p>Even<br>
    </p>
    <div>Le 14/06/2022 à 14:49, Pekka Sarkola a
      écrit :<br>
    </div>
    <blockquote type="cite">
      
      <div dir="ltr">Hi!
        <div><br>
        </div>
        <div>I had some other problems with the WFS service description
          file, need to check that.</div>
        <div><br>
        </div>
        <div>However, in another case I'd like to
          use GML_ATTRIBUTES_TO_OGR_FIELDS -config for WFS service. </div>
        <div><br>
        </div>
        <div>Rgs,</div>
        <div>
          <div>
            <div dir="ltr">
              <div dir="ltr">
                <div>
                  <div dir="ltr">
                    <div dir="ltr">
                      <div dir="ltr">
                        <p><span style="font-size:12.8px">Pekka <br>
                          </span></p>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr" class="gmail_attr">ti 14. kesäk. 2022 klo 8.58
          Rahkonen Jukka (<a href="mailto:jukka.rahkonen@maanmittauslaitos.fi" target="_blank">jukka.rahkonen@maanmittauslaitos.fi</a>)
          kirjoitti:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
          <div lang="FI">
            <div>
              <p class="MsoNormal"><span>Hi,</span></p>
              <p class="MsoNormal"><span> </span></p>
              <p class="MsoNormal"><span lang="EN-US">Do you need to use
                  just the OGR virtual format
                  <a href="https://gdal.org/drivers/vector/vrt.html" target="_blank">https://gdal.org/drivers/vector/vrt.html</a>?
                  The simple WFS service description file
                  <a href="https://gdal.org/drivers/vector/wfs.html" target="_blank">https://gdal.org/drivers/vector/wfs.html</a>
                  seems to support an additional PagingAllowed element
                  as immediate children of the OGRWFSDataSource for that
                  purpose.</span></p>
              <p class="MsoNormal"><span lang="EN-US"> </span></p>
              <p class="MsoNormal"><span lang="EN-US">-Jukka Rahkonen-</span></p>
              <p class="MsoNormal"><span lang="EN-US"> </span></p>
              <div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0cm 0cm">
                <p class="MsoNormal"><b>Lähettäjä:</b> gdal-dev <<a href="mailto:gdal-dev-bounces@lists.osgeo.org" target="_blank">gdal-dev-bounces@lists.osgeo.org</a>>
                  <b>Puolesta </b>Pekka Sarkola<br>
                  <b>Lähetetty:</b> tiistai 14. kesäkuuta 2022 8.34<br>
                  <b>Vastaanottaja:</b> '<a href="mailto:gdal-dev@lists.osgeo.org" target="_blank">gdal-dev@lists.osgeo.org</a>'
                  (<a href="mailto:gdal-dev@lists.osgeo.org" target="_blank">gdal-dev@lists.osgeo.org</a>)
                  <<a href="mailto:gdal-dev@lists.osgeo.org" target="_blank">gdal-dev@lists.osgeo.org</a>><br>
                  <b>Aihe:</b> [gdal-dev] Possibility to use config
                  options in VRT-files</p>
              </div>
              <p class="MsoNormal"> </p>
              <div>
                <p class="MsoNormal">Hi!</p>
                <div>
                  <p class="MsoNormal"> </p>
                </div>
                <div>
                  <p class="MsoNormal">Could it be possible to add GDAL
                    configuration options to VRT-files? </p>
                </div>
                <div>
                  <p class="MsoNormal"> </p>
                </div>
                <div>
                  <p class="MsoNormal">I have worked with several
                    WFS-services, where I have to set
                    OGR_WFS_PAGING_ALLOWED=OFF -option to get data.It is
                    not problem to add system variable or --config when
                    running ogrinfo/ogr2ogr from command line. But I
                    like to use the same .vrt-files also in QGIS and it
                    will be more convenient to add necessary
                    config-options to vrt-files.</p>
                </div>
                <div>
                  <p class="MsoNormal"> </p>
                </div>
                <div>
                  <p class="MsoNormal">Rgs,</p>
                </div>
                <div>
                  <p class="MsoNormal"> </p>
                </div>
                <div>
                  <p class="MsoNormal">Pekka</p>
                </div>
                <div>
                  <p class="MsoNormal"><br clear="all">
                  </p>
                  <div>
                    <div>
                      <div>
                        <div>
                          <div>
                            <div>
                              <p> </p>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </blockquote>
      </div>
      <br>
      <fieldset></fieldset>
      <pre>_______________________________________________
gdal-dev mailing list
<a href="mailto:gdal-dev@lists.osgeo.org" target="_blank">gdal-dev@lists.osgeo.org</a>
<a href="https://lists.osgeo.org/mailman/listinfo/gdal-dev" target="_blank">https://lists.osgeo.org/mailman/listinfo/gdal-dev</a>
</pre>
    </blockquote>
    <pre cols="72">-- 
<a href="http://www.spatialys.com" target="_blank">http://www.spatialys.com</a>
My software is free, but my time generally not.</pre>
  </div>

</blockquote></div>