Page 1 of 1
XML/XSL Processing
Posted: Tue Jan 24, 2012 8:08 pm
by Redoute
Hi,
regarding this very simple XML page:
http://www.selfxml.de/buch.xml
The content is rendered as a table only when I allow selfxml.de in Noscript. Is this intentional? Why?
Thanks
Redoute
Re: XML/XSL Processing
Posted: Tue Jan 24, 2012 8:17 pm
by Redoute
Now I found the relevant option. And that searching for "XSLT" returns various topics in this forum ...
Sorry for making noise.
Re: XML/XSL Processing
Posted: Tue Jan 24, 2012 8:31 pm
by therube
Certainly not noise.
I just learned something, thanks
.
Now let
me search for 'XSLT'.
Re: XML/XSL Processing
Posted: Thu Jan 26, 2012 9:19 am
by GµårÐïåñ
When you click on a link like you provided with the site untrusted and setting NoScript
Options|Advanced|Untrusted|Forbid XSLT will give you the linear bunched response while allowing the site or unchecking forbid XSLT will return the table you are looking for. Its by design and due to protection from some attack vectors that were discovered.
It as considered as active style sheet content and began blocking it as of the following changelog excerpt:
v 1.9.1.5
==========================================================================
+ XSLT stylesheets are regarded as active content and blocked by
default on untrusted documents and/or from untrusted origins
emphasis was added by me, Hope that helps.