RE: [xsl] xsl and xalan extensions/namespaces

Subject: RE: [xsl] xsl and xalan extensions/namespaces
From: "Adam Morgan" <adam.morgan@xxxxxxxxxx>
Date: Thu, 18 Nov 2004 16:38:50 -0400
Actually, I think I've answered my own question... the only extensions
they should be able to access are ones I've set as properties of the
Transform object I'm using, no?

Anyone, anyone? =)

adam

-----Original Message-----
From: Adam Morgan [mailto:adam.morgan@xxxxxxxxxx]
Sent: Thursday, November 18, 2004 4:13 PM
To: xsl-list@xxxxxxxxxxxxxxxxxxxxxx
Subject: [xsl] xsl and xalan extensions/namespaces

Is there any way to police what namespaces/xalan extensions are being
used in an xsl transform?

Ex, you have a jsp which does a transform for some of its rendering...
and you're letting 3rdParties write their own xml/xsl for that part of
the page...

Now, the xml and xsl is bundled in a JAR with any number of their own
java.classes...

I only want them to be able to access a single xalan extension of a
java.class that I wrote... and not let them call their own cause it
would be a *bit* of a security hole!

Any ideas??

Adam

Current Thread