Subject: Re: [xsl] Can an XSLT document invoke arbitrary extension functions? From: "G. Ken Holman" <gkholman@xxxxxxxxxxxxxxxxxxxx> Date: Mon, 26 Oct 2009 16:53:07 -0400 |
Below is an XSLT transform that - supposedly - opens a DOS command prompt. I saw the XSLT transform in this [1] briefing (slide 132). I ran it. It doesn't work; it just produces an error.
http://www.w3.org/TR/1999/REC-xslt-19991116#section-Extension-Functions "If such an extension function occurs in an expression and the extension function is actually called, the XSLT processor must signal an error."
1. Should the below XSLT Transform work? (i.e. is there simply a minor bug in it, that when fixed, would make it operate as desired?)
2. Is there any control over the set of extension functions provided by XSLT processors?
3. How do you respond to the briefing's suggestions that XSLT is riddled with security leaks? (I realize this is a broad question; any thoughts you have would be appreciated)
-- Upcoming: hands-on XSLT, XQuery and XSL-FO Washington DC Nov 2009 Interested in other classes? http://www.CraneSoftwrights.com/s/i/ Crane Softwrights Ltd. http://www.CraneSoftwrights.com/s/ Training tools: Comprehensive interactive XSLT/XPath 1.0/2.0 video Video lesson: http://www.youtube.com/watch?v=PrNjJCh7Ppg&fmt=18 Video overview: http://www.youtube.com/watch?v=VTiodiij6gE&fmt=18 G. Ken Holman mailto:gkholman@xxxxxxxxxxxxxxxxxxxx Male Cancer Awareness Nov'07 http://www.CraneSoftwrights.com/s/bc Legal business disclaimers: http://www.CraneSoftwrights.com/legal
Current Thread |
---|
|
<- Previous | Index | Next -> |
---|---|---|
[xsl] Can an XSLT document invoke a, Costello, Roger L. | Thread | RE: [xsl] Can an XSLT document invo, Michael Kay |
[xsl] Can an XSLT document invoke a, Costello, Roger L. | Date | RE: [xsl] Can an XSLT document invo, Michael Kay |
Month |