[XSL-LIST Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message] Re: HTML5 semantics and XSLT
On Wed, 2022-02-23 at 18:37 +0000, Piez, Wendell A. (Fed) wendell.piez@xxxxxxxx wrote: > Hi again, > > To Mike's question "And presumably any harm that can be done using > this exploit could equally be done by executing untrusted HTML in the > browser directly?" > > Indeed it could. This is why there are sandbox facilities in HTML, in which you can say, "beneath this element, no scripting is allowed and any additional CSS rules will be ignored". The mechanism gives separate control over script, style, iframe. Liam -- Liam Quin,B https://www.delightfulcomputing.com/ Available for XML/Document/Information Architecture/XSLT/ XSL/XQuery/Web/Text Processing/A11Y training, work & consulting. Barefoot Web-slave, antique illustrations: B http://www.fromoldbooks.org
|
PURCHASE STYLUS STUDIO ONLINE TODAY!Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced! Download The World's Best XML IDE!Accelerate XML development with our award-winning XML IDE - Download a free trial today! Subscribe in XML format
|