xsl-list
[Top] [All Lists]

Re: insecure xslt

2005-11-24 07:17:12

I wish we could discuss the google search appliance's XSL other than
generalities. I think it sucks. The XML is fine, though not very
descriptive. I don't understand why such a simple thing needs to be
secret. (Maybe because it is lame?) (Can I be sued for these statements?)

What I do (and it eliminates the bug) is use a servlet filter to get the
form submission, form a query to submit to the appliance and get the
results backs as XML to do with what I may.


Yes, this pretty much seems to be what google recommends if one wants
to use xslt that is beyond the simplest use cases.

--~------------------------------------------------------------------
XSL-List info and archive:  http://www.mulberrytech.com/xsl/xsl-list
To unsubscribe, go to: http://lists.mulberrytech.com/xsl-list/
or e-mail: <mailto:xsl-list-unsubscribe(_at_)lists(_dot_)mulberrytech(_dot_)com>
--~--



<Prev in Thread] Current Thread [Next in Thread>