[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: IE6, XSL and The Web (was: RE: What the .... ? R

• To: "Sebastian Schnitzenbaumer" <schnitz@m...>, <xml-dev@l...>
• Subject: Re: IE6, XSL and The Web (was: RE: What the .... ? Referencing XSL stylesheets across domains)
• From: "George Cristian Bina" <george@s...>
• Date: Fri, 9 Aug 2002 09:57:45 +0300
• References: <D0F1529EE943B3449F755CA1A40887465B4085@w...>

Hi

I think you can put a CGI on your site that just gets the content from
http://www.w3.org/Style/XSL/stylesheets/public2html.xsl and change the
reference to point to to that CGI in the XML document.

Best Regards,
 George
-------------------------------------------------------------
George Cristian Bina mailto:george@s...
COO - sync.ro
Phone  +40-(0)251-461480, +40-(0)251-461481
Fax       +40-(0)251-461482
Mobile +40-(0)723-224067
SyncRO Soft srl, Bd N. Titulescu 170, Craiova, 1100 - Romania
http://www.sync.ro
<oXygen/> XML Editor - http://www.oxygenxml.com/


----- Original Message -----
From: "Sebastian Schnitzenbaumer" <schnitz@m...>
To: <jim@a...>; <xml-dev@l...>
Sent: Thursday, August 08, 2002 8:08 PM
Subject:  IE6, XSL and The Web (was: RE:  What the .... ?
Referencing XSL stylesheets across domains)


> Jim, first of all, thank you so much for the pointers.
>
> This is just awful. It really hurts. This essentially nukes
> an entire branch of applications. It prevents us now from
> fully taking advantage of the seperation between data
> and presentation.
>
> It is a feature, not a bug, to have data and presentation
> in different locations, different locations *on the web*.
> And this feature is so much bigger than allowing some
> script hacking inside XSL thru <msxsl:script>.
>
> I'm angry, frustrated and very sad about this observation,
>
> - Sebastian
>
>
> -----Ursprüngliche Nachricht-----
> Von: Jim Ancona
> Gesendet: Do 08.08.2002 18:10
> An: xml-dev@l...
> Cc: Sebastian Schnitzenbaumer
> Betreff: RE:  What the .... ? Referencing XSL
> stylesheets across domains
>
>
>
> --- Sebastian Schnitzenbaumer <schnitz@m...> wrote:
> > http://markuplanguage.oss4u.de/test3.xml
> > references
> http://www.w3.org/Style/XSL/stylesheets/public2html.xsl
> >
> > This works in Mozilla (the result looks bogus, I'm just
> testing), my IE6
> > says access denied. I just want to hear from someone "yes,
> this is true,
> > we've known this for years, or, no, actually it does work, you
> must
> > have some other bug". Please let me know...
>
> Note that MSDN[1] says the URI in the xsl-stylesheet PI "is the
> Uniform
> Resource Identifier (URI) of the style sheet. This URI is
> relative to the
> location of the XML document itself." The W3C REC that defines
> the PI[2] has no
> such restriction.
>
> Since Microsoft allows the <msxsl:script> extension which
> permits embedded
> script code in stylesheets, it might be that this behavior is
> designed to
> prevent some kind of cross-site scripting exploit.
>
> Jim
>
> [1] -
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/xmlsdk/
> htm/xml_concepts_369f.asp
>
> [2] - http://www.w3.org/TR/xml-stylesheet/
>
> =====
> Jim Ancona
> jim@a...                     jancona@x...
>
> __________________________________________________
> Do You Yahoo!?
> HotJobs - Search Thousands of New Jobs
> http://www.hotjobs.com
>

• References:
  • IE6, XSL and The Web (was: RE: What the .... ? Referencing XSL stylesheets across domains)
    • From: "Sebastian Schnitzenbaumer" <schnitz@m...>

• Prev by Date: XML Core WG would appreciate test cases for XInclude
• Next by Date: Re: code challenge
• Previous by thread: Re: IE6, XSL and The Web (was: RE: What the .... ?Referencing XSL stylesheets across domains)
• Next by thread: code challenge
• Index(es):
  • Date
  • Thread