Re: [xsl] RSS feeds and disable-output-escaping="yes"

Subject: Re: [xsl] RSS feeds and disable-output-escaping="yes"
From: Julian Reschke <julian.reschke@xxxxxx>
Date: Tue, 10 May 2005 11:28:29 +0200
Don Robertson wrote:
Greetings,
I have set up a Drupal sub-site and would like the RSS feed from the
site to be displayed as a 'whats new' panel on our main page.

Easy little XSL script I thought. The RSS feed has all the html in the
'description' tag escaped. I have used disable-output-escaping="yes" to
display the html, but I really need to be able to manipulate some of the
tags - the img tags in particular - I'd like to either remove or reduce
the width of the images (it is mostly user documentation for the
WebOPAC).

Is there any way I can do this or do I need to pre-process the rss feed
before I feed it into the XSL transformer thingy.

I have read a lot of the archives about output escaping and recognise
there are arguments as to why it is not a 'good thing' but I still want
to do it anyway. I just don't believe I am the first person to have this
problem :-)

You are aware that if you do that and do *not* filter the HTML, the RSS feed can inject arbitrary script and HTML code into your main page???

Best regards,

Julian

Current Thread