I've seen some examples recently where initializing a Java object
requires two calls: a constructor and an initialization.
<xsl:variable name="x" select="java:object.new()"/>
<xsl:do select="setProperty($x,17)"/>
<xsl:value-of select="$x"/>
for some reason, probably my own ingrained apocalypticism, this seems to
me to be a worse threat than xsl:script ever was.
XSL-List info and archive: http://www.mulberrytech.com/xsl/xsl-list