Fw: Signing of XSL scripts

["Martin Bryan" <mtbryan@xxxxxxxxxxxxxx>]

It is beginning to look as if the use of ECMAScript may lead to some
problems with system security unless there is a change in the way in which
scripts can be authenticated in Internet Explorer. For input/output to a
local system from Internet Explorer you need to use properly signed (i.e.
signed by the Microsoft Authenticode) ActiveX objects or JavaBeans. However
there
appears to be no mechanism whereby you can get an XSL file that contains a
script that needs to read/write to the local system signed. Until a
mechanism for authenticating XSL scripts that read/write to local discs is
available widespread distribution of XSL controlled files will not be
possible.

Martin Bryan



 XSL-List info and archive:  http://www.mulberrytech.com/xsl/xsl-list