RE: Hiding XSL

Subject: RE: Hiding XSL
From: "Chris Bayes" <Chris@xxxxxxxxxxx>
Date: Fri, 18 Aug 2000 22:27:24 +0100
Iyer,
The point is that you can just do view source. Looking at the source you can
see that the xsl is in a file called xml_Style.xsl in the current folder as
the page you are looking at. So say you are looking at
http://microsoft.com/iyersexample/somehtml.html and you see
xmlStyle.load("xml_Style.xsl"); then all you have to do is type in the
address http://microsoft.com/iyerexample/xml_style.xsl and you will see the
stylesheet in your browser. Then File/SaveAs will get the stylesheet to a
file. This does hide the stylesheet but for all of 2 seconds. I don't think
this is very well hidden from all but the most casual browser and the casual
browser never does View/View Source anyway.

XML/XSL Portal
http://www.bayes.co.uk/xml


>-----Original Message-----
>From: owner-xsl-list@xxxxxxxxxxxxxxxx
>[mailto:owner-xsl-list@xxxxxxxxxxxxxxxx]On Behalf Of Iyer, Srinivasan
>(MLIP - PCC)
>Sent: 18 August 2000 21:26
>To: 'xsl-list@xxxxxxxxxxxxxxxx'
>Subject: RE: Hiding XSL
>
>
>I am not sure of how to encode the xml data island within the
>script tag ???
>but something like this might help .................................
>
>=================================
>
>screnc.exe xmlenc.html xmlenc1.html
>
>=================================
>xmlenc.html
>=================================
><html>
><h4> xml demo</h4>
><body>
><div id="demo" ></div>
><script>
>var xmlData , xmlStyle
>	xmlData=new ActiveXObject('Microsoft.XMLDOM');
>	xmlData.async =false;
>	xmlData.load("xml_Data.asp");
>	xmlStyle=new ActiveXObject('Microsoft.XMLDOM');
>	xmlStyle.async = false;
>	xmlStyle.load("xml_Style.xsl");
>	demo.innerHTML=xmlData.transformNode(xmlStyle)
></script>
></body>
></html>
>
>=================================
>
>Srini
>
>Date: Fri, 18 Aug 2000 11:51:19 +0100
>From: "Chris Bayes" <Chris@xxxxxxxxxxx>
>Subject: RE: Hiding the XSL ?
>
>Ciaran,
>A data island is xml within your html it can take 2 forms
>
><XML id="somexml">
><xxx />
></XML>
>
>and
>
><XML id="somexml" src="somexml.xml"></XML>
>
>The second form will kindof hide your xml/xsl but it is easy to get it if
>you want.
>There is another form which is now depracated which overloads the
>script tag
>
><SCRIPT language="XML" src="somexml.xml"></SCRIPT>
>
>There is a tool from microsoft called the Script Encoder which will encode
>vbscript and javascript
>and is used in html like this.
>
><SCRIPT language="JScript.Encode" src="somexml.js"></SCRIPT>
>
>But I doubt if that will work for XML.
>
>You could possibly do this
>
><XML id="somexml">
><encoded>
>8087098709870897087587654675454354235342543254323345478656598768758
>765764564
>63543
></encoded>
></XML>
><SCRIPT language="JavaScript>
> var xsl = deobfuscate(somexml.documentElement);
> var xsldom.loadXML(xsl);
>	</SCRIPT>
>
>
> XSL-List info and archive:  http://www.mulberrytech.com/xsl/xsl-list


 XSL-List info and archive:  http://www.mulberrytech.com/xsl/xsl-list


Current Thread