Some schema dependencies in the deposit handling are retrieved live

Where?

Deposit system.

What's the situation?

Some schema dependencies, such as https://www.niso.org/schemas/ali/1.0/ali.xsd are retrieved live. This means that if the external dependency is unavailable (network or service error) we will see failure to make deposits. It also introduces a potential security vulnerability.

What does it make more difficult?

XML Deposits for given versions may not work if external hosting is down.

How can we improve it?

Store all XSDs in source control. Where we reference non-Crossref XSDs, ensure that our XML handling knows to retrieve them from here. This could simply be done by reviewing the XSD files that we store in Content System.