XSL/T

1 of 318 | Where did it go? - You've created your map, selected your schemas and (if you're anything like me) set the custom xsl path to the file containing the xsl script you've worked hard to create. You then go to the orchestration and add a transform shape, but when you select the messages the designer notices you have selected different types to those in the map and kindly offers to change the types in the map for you; you think - how generous and kind... However, it goes one step further, and without much notice, it is re-setting the custom xsl path (to nothing, that is), which would result in an empty output from the map when you run the process and one very frustrated BizTalk developer. To be fair it does sug......

2 of 318 | SharePoint Conference - Building a SharePoint Designer Mashup (Part Deux) -   Hi everyone.  For those of you who have been waiting on Part 2 of this blog, I am truly sorry.  A valuable lesson that I've learned is - Don't break a blog article into multiple parts :)  With that said, let's get right to it. For those of you who need a refresher on Part 1 (and who can blame you), please go here. Today, I will walk through the 2 remaining things that I demo'd at the SharePoint Conference.  Building an advanced view with an ASP.NET calendar control and a data view Adding an MSN Weather RSS feed I will be working off the same site and scenario that I used from Part 1, which is to build a SharePoint site to manage my golf course and golf shop b......

3 of 318 | XML Notepad 2007 - Microsoft released an editor for XML files, you can download it here.Handy features include:- Tree View synchronized with Node Text View for quick editing of node names and values.- Incremental search (Ctrl+I) in both tree and text views, so as you type it navigates to matching nodes.- Cut/copy/paste with full namespace support.- Drag/drop support for easy manipulation of the tree, even across different instances of XML - Notepad and from the file system.- Infinite undo/redo for all edit operations.- In place popup multi-line editing of large text node values.- Configurable fonts and colors via the options dialog.- Full find/replace dialog with support for regex and XPath.- Good performance......

4 of 318 | Content Query Webpart - Deploy Custom Style - Problem:  I want to deploy my custom style for the Content Query Web Part (CQWP).   The CQWP is using the following files to style its presentation: ContentQueryMain.xsl, Header.xsl and ItemStyle.xsl. The files are located under /Style Library/XSL Style Sheets in the root site.   The first solution that comes into my mind is to replace the OOTB xslt files with our customized files. It will work if you do it as a manual operation from the Sharepoint UI but it will not work from the site definition (onet.xml) or from a feature. Also this solution doesn’t provide you an independent solution that doesn’t interfere with Microsoft possible updates.   Solution:  ContentByQueryWebPart is th......

5 of 318 | Use a dataview to create a color table from XML -   I’m Steve Schermerhorn, one of the new developers on the Expression Web team.   When I’m developing a website or application I’m typically dealing with a wide range of colors throughout my project. On more than one occasion it would have been really handy to have a visual reference that also mapped the colors to their names and hex values. I eventually managed to come up with a solution using an XSL to transform an XML file into a nice little color reference table I could print off and hang on my wall. This little ‘how to’ is going to give you a very hands on example on how you can take an XML file and create an HTML page.   The data For this example I started with ......

6 of 318 | Otsingu tulemuse täiendamine lingiga, mis viib dokumendi kaardile - SharePointi dokumentide kasutajana oled kindlasti ka igapäevane otsimootori kasutaja. Kui sa oma otsinguga midagi ette võtnud veel pole siis otsitulemus on sul selline: Oluline on siinkohal ära märkida, et tulemuses leiduv link viib sind otse dokumendi avamisele. Ehk vajutades lingil "Leping Valge taevas.docx" avab sulle konkreetse dokumendi. Mis siis aga kui sa enne tahaksid dokumendi registrikaarti avada ja dokumenti ennast ei tahaks üldse lugeda ? Keeruline ülesanne jällegi, eksole. Kuidas siis jõuda dokumendi otsingu juures järgmise tulemuseni: Ülaltoodud pildil: 1. veerus kuvatakse dokumendi nimi ja link otse do......

7 of 318 | Creating Master-Detail views with Web Part connections using Flickr Services as a Data Source - Hi everyone, Allan Smith here. I’m a Software Development Engineer in Test on the SharePoint Designer Data team. I have a great example of using a server-side script data source to create Master-Detail views using the DataFormWebPart. My finished example is show in this screen shot: I will use Flickr services as my data source in this example thus there are a few pre-requisites before we can get started. Flickr requires an API key in order to use their service but this is easy to setup by visiting their site at http://www.flickr.com/services/api/. I also recommend reading through their API methods to see what is available via this service. For this example I have decided to use the flickr.......

8 of 318 | Troubleshooting a performance issue with Failed Request Tracing and appcmd in IIS7 - I know I'm a little late in the game, but I decided that after vacation it was finally time for me to install Windows 2008 on my Vista box and play around with some of the IIS 7 features like Failed Request Tracing (known as FRT or FREB) and the appcmd tool. I wanted to show you an alternative way of troubleshooting Lab 1 (hang scenario) from my Debugging Lab series using Failed Request Tracing and appcmd so here are some things I will go through in this post Setting up failed request tracing Listing executing requests with appcmd Using Page.Trace with failed request tracing Setting up different FREB rules and looking at the differences between them Short notes about failed request tra......

9 of 318 | Document and Code Generation by LINQ and XSL - An article on how to generate source code as well as populate Excel Spreadsheets....

10 of 318 | Muenchian Grouping and Sorting in BizTalk Maps - First, I'll admit the title of this post isn't entirely accurate, because you can't do the grouping and sorting I'm about to show using the BizTalk mapper.  We'll be overriding the XSLT for a BizTalk map, so therefore it might be more appropriate to call this "Muenchian Grouping and Sorting in XSLT."  But since I'm doing this from a BizTalk perspective, I can live with the subtle difference. :) Let's say I have a flat file schema to import sales order information.  Being a flat file, we can assume that it's completely denormalized, meaning there won't be defined relationships and we'll have redundant data.  Let's take a simplified flat file that looks somethin......

11 of 318 | xmlroff 0.6.0 released - Version 0.6.0 of xmlroff has been released; it is an open source XSL-FO implementation. Changes include a more flexible BSD-based license, PNG graphics support in the Cairo back-end, and improved documentation....

12 of 318 | Standardization as a collective loss of imagination? - Regularly as clockwork, every five years another group attempts to make a new standard language for typesetting. FOSI, DSSSL, XSL-FO, and ODF (plus the less grandiose scopes of CSS (styling) and OOXML (legacy).) I predict that in a decade we... ...

13 of 318 | BAM and MsBuild - Article Source: http://geekswithblogs.net/michaelstephenson This article is intended to explain how to use MsBuild to help you when using BAM on a BizTalk project. When you use BAM one of the positives is that you have BM.exe and BTTDeploy.exe which can be used to help you do this deployment etc. However as I have mentioned in previous posts I feel one of the things that is a barrier to helping people get up and running with BAM is that there isn’t really anything (that I’ve seen anyway) which helps you to explain how your BAM work would fit into your normal solution development build and continuous integration processes. To try to address this barrier hopefully this article will provide......

14 of 318 | The XML Apache Project has posted version 0.95 of FOP, an open source XSL Formatting Objects to PDF/PostScript/RTF converter written in Java. - The XML Apache Project has posted version 0.95 of FOP, an open source XSL Formatting Objects to PDF/PostScript/RTF converter written in Java. This release fixes bugs, improves table support, and removes the need for some additional libraries. Java 1.4 or later is required....

15 of 318 | Playing with ListStyles.xsl for CQWP in MOSS - Although new to all this MOSS stuff I am getting stuck in with the Content Query Web Part (CQWP) and XSL.  They are a pretty powerful combination, but pretty soon I could see how this could become slightly wild and considering ListStyles.xsl is an "out of the box" file, getting crazy with custom files could become more of a problem than simply a huge file.  Check out these two posts on how to manage custom styles. 1. Liam (Sharepoint MVP here in the UK) posts about editing the ListStyles.xsl, but only to add import statements to your own custom csl files. 2. Brendon Swartz post about how to create a new CQWP instance by exporting the default one, editing the webparts xml definition by......

16 of 318 | [Dimitre Novatchev:XSL-List] Understanding JSON: Why JSON and XML are Incompatible and Why You Should Care - Dimitre Novatchev recently posted the following to XSL-List, something of which I thought would be of both interest and benefit to those of you in Land-O-XML who care about things kinds of things. As such, ......

17 of 318 | How We Did It - Tag Driven Information Architecture using MOSS 2007 for the New Zealand Ministry of Transport - Background About a year ago, Provoke (a Microsoft Gold Certified partner based in New Zealand) worked with the New Zealand Ministry of Transport to complete the second phase of their corporate intranet. In addition to being proven successful within the Ministry, the intranet won several awards including Microsoft’s Partner Solution of the Year and was named in Nielson Norman Group’s “Top Ten Intranets of 2008.” More information about this distinguished annual award from Jakob Nielson himself. Overview The Ministry of Transport (MoT) is a government agency that is responsible for creating transport related policy papers and reports for the New Zealand government. They wanted an intranet tha......

18 of 318 | The W3C has posted the first working draft of Requirements of Japanese Text Layout. - The W3C has posted the first working draft of Requirements of Japanese Text Layout. "This document describes requirements for general Japanese layout realized with technologies like CSS, SVG and XSL-FO. The document is mainly based on a standard for Japanese layout, JIS X 4051. However, it addresses also areas which are not covered by JIS X 4051. The document is currently in draft stage. This public draft contains the Introduction and section 1 Basics of Japanese Text Layout. Further sections are available in a non-public version of the document and will be integrated into a further public Working Draft."...

19 of 318 | Latest tool: XPath query field extractor for InfoPath 2003 - Update: This tool seems to be only relevant with InfoPath 2003. A co-worker pointed out that due to customer pains around a the lack of a feature like this, in InfoPath 2007 you can right-click a node in the data source and choose "Copy XPath". Cool! Thanks to Scott Heim for pointing this out. So, I love making tools. One-off things that process something. Batch files that lessen monotony. Sexy little WinForm apps for displaying data. XSL transformations that regurgitate and pre-process XML. My latest tool is a small WinForms app that pulls out a list of fields form an InfoPath document so they can be referenced as XPath. This is pretty neat because my client needed a documentation a......

20 of 318 | Requirements of Japanese Text Layout Draft Published - 2008-04-11: Participants from four W3C Groups CSS, Internationalization Core, SVG and XSL Working Groups as part of the Japanese Layout Task Force published Requirements of Japanese Text Layout. This document describes requirements for general Japanese layout realized with technologies like CSS, SVG and XSL-FO. The document is mainly based on a standard for Japanese layout, JIS X 4051. However, it also addresses areas which are not covered by JIS X 4051. Japanese version is also available. Learn more about basics of Japanese text layout and W3C's Internationalization Activity. (Permalink)...

21 of 318 | Compiled XSLT in Biztalk Orchestrations - One of the new features in the Visual Studio 2008 release is the XSLT Compiler tool xsltc.exe.  The documentation can be found here.  This tool will precompile the xslt sheets into an assembly. It has been my experience over the years that the xsl mappings change more often than the message flows.  With the xsltc.exe tool the mappings can be changed, compiled and installed without changing the Biztalk orchestrations. First you need to create the xsl DLLs: xsltc.exe  /settings:document+,script+ myXsl.xsl This will create a DLL file with the compiled xsl.  There also might be DLLs for embedded scripts. To use the xsl DLLs the assemblies have to be signed.  Use ILDASM and ILASM to disasse......

22 of 318 | String.Replace() in XSLT - Here's a sample template that lets you have the String.Replace() functionality in XSLT 1.0.   The template "string-replace-all" takes 3 parameters and recursively processes the input text string.      text         : main string      replace : the string fragment to be replaced     by           :  the replacement string    Here's how it is called:  The resulting value of $myVar after {ReplaceMe} is replaced is "This is a sample text : String.Replace() in XSLT and String.Replace() in XSLT" For those who are not familiar with XSLT syntax and here's the C# equivalent.  An excellent material for the thedailywtf! :)  (Note: I'm not so sure, but I think in XSL 2.0......

23 of 318 | Extensible Stylesheet Language (XSL) Requirements Version 2.0; Comments Welcome on First Public Draft - 2008-03-26: The XSL Working Group has published the First Public Working Draft of Extensible Stylesheet Language (XSL) Requirements Version 2.0. This document enumerates the collected requirements for a 2.0 version of XSL Formatting Objects (XSL-FO), not for XSLT. XSL-FO is widely deployed in industry and academia where multiple output forms (typically print and online) are needed from single source XML. It is used in many diverse applications and countries on a large number of implementations to create technical documentation, reports and contracts, terms and conditions, invoices and other forms processing, such as driver's licenses and postal forms. The XSL Working Group invites people to......

24 of 318 | XSL-FO 2.0 Requirements Published - The Extensible Stylesheet Language (XSL) Requirements Version 2.0 have been published, along with a Survey to ask potential implementors and users for feedback on the relative importance of the proposed new features....

25 of 318 | XSL-FO 2.0 Requirements Published - The Extensible Stylesheet Language (XSL) Requirements Version 2.0 have been published, along with a Survey to ask potential implementors and users for feedback on the relative importance of the proposed new features....

26 of 318 | Showing Weather web-part using RSS & weather.yahoo.com (in Sharepoint 2007) - One of my Colleagues happen to ask me how do we show the weather web-part on our Sharepoint Portal. The Solution was pretty simple and thought I should share this with you all. Following are the steps: 1. Add the RSS web-part on your sharepoint portal (MOSS, Sharepoint 2007) site. 2. Give the RSS feed as: http://weather.yahooapis.com/forecastrss?p=08810 (p is the Parameter for your zip code) 3. Now the most important part, open the XSL editor of your RSS web-part and remove everything from there and then just paste one of the XSL codes (show below) into that. Thats it you are done, your weather web-part is ready now. So all that is important here is XSL. Following are the views that......

27 of 318 | msxml:script rant - There are some things that you just can't do with the native implementation of xsl.  One alternative is to use the msxml:script block.  The problem I am running into is the different implementations of the msxml:script in MSXML and System.Xml.Xsl .  In MSXML vbscript is supported while System.Xml.Xsl does not support vbscript.  System.Xml.Xsl supports C#,VB.Net, JScript, java, and other languages.  The documentation is "XSLT Stylesheet Scripting Using <msxsl:script>" So if your xsl sheets were designed for MSXML and contain vbscript they will probably fail in System.Xml.Xsl with 'Let' and 'Set' assignment statements are no longer supported. The work around for this of course is to......

28 of 318 | Sun has posted version 0.5.5 of xmlroff, an open source XSL Formatting Objects to PDF and PostScript converter. - Sun has posted version 0.5.5 of xmlroff, an open source XSL Formatting Objects to PDF and PostScript converter. (Web site not yet updated though.) xmlroff is written in C for Linux, and relies on the libxml2, libxslt, and the GLib, and GObjectfrom GTK+ and GNOME (though neither GTK+ nor Gnome is required). It also needs PDFlib, FreeType2, and Fontconfig. xmlroff can be run from the command line. It also includes a libfo library. This version improves table rendering....

29 of 318 | Sun has posted version 0.5.4 of xmlroff, an open source XSL Formatting Objects to PDF and PostScript converter. - Sun has posted version 0.5.4 of xmlroff, an open source XSL Formatting Objects to PDF and PostScript converter. xmlroff is written in C for Linux, and relies on the libxml2, libxslt, and the GLib, and GObjectfrom GTK+ and GNOME (though neither GTK+ nor Gnome is required). It also needs PDFlib, FreeType2, and Fontconfig. xmlroff can be run from the command line. It also includes a libfo library. This version fixes bugs....

30 of 318 | Announcing the XSLT Profiler Addin for VS 2008 - XML Tools team has released the XSLT Profiler Addin for VS 2008 - a quick and reliable performance analysis profiler tool that assists in the development and debugging of XSLT documents. The XSLT Profiler Addin for VS 2008 allows developers to measure, evaluate, and target performance-related problems in XSLT code by creating detailed XSLT performance reports. The XSLT Profiler includes a wealth of useful hints for XSL and XSLT style sheet optimizations, which are essential for XSLT-based applications that demand maximum performance.   If you need to develop reliable and robust software, the XSLT Profiler is capable of detecting the performance errors and defects in coding so that t......

31 of 318 | New XSLT stylesheet template in Visual Studio 2008 (again) - When you create new XSLT stylesheet in Visual Studio via project (Add/New Item) or globally (File/New/File aka Ctrl+N), you start with template content. This template is changing in every new Visual Studio version, probably because every new generation of developers working on XSLT tools in Visual Studio have different vision about what you should start with. Let's see. Visual Studio 2003. Pure simplicity: <?xml version="1.0" encoding="UTF-8" ?> <stylesheet version="1.0" xmlns="http://www.w3.org/1999/XSL/Transform"> </stylesheet> Visual Studio 2005 has two different templates for new XSLT stylesheet (!). When you......

32 of 318 | Anyone converted an XSD having import statements using an XSL? - Hi All,<br><br>How can I write an XSL file for an XSD file that contains multiple import statement?<br><br>I am writing an XSL to convert XSDs to ...

33 of 318 | What is a "splitter pattern" in BizTalk? - Overall, when an incoming XML message contains multiple potential single messages, the extraction process needed to separate the messages out is thought of as a "split " or a "shred". The splitter pattern then, is a reliable, uniform way to address this need throughout your applications. An example for why your application might need to split messages would be something like a single input XML message with multple pension fund benefits for multiple persons which require multiple output XML messages with each pension benefit grouped for each person in a single transformed XML message. There are alternative ways to successfully shred the message, but the pattern I like best can be tested by......

34 of 318 | Getting HTML 5 styles in IE 7+ - Btw, if you want CSS rules to apply to unknown elements in IE, you just have to do document.createElement(elementName). This somehow lets the CSS engine know that elements with that name exist. This was uttered by Sjoerd Visscher innocently on a Sam Ruby thread, and it sent ripples of "huh? really? How come I never know that!" through all of the experts. This fact means that you the following will show up as red in IE 7: PLAIN TEXT HTML:     blah { color: red; } document.createElement("blah") Hello!/blah>   This is an example from John Resig as he discusses a HTML 5 shiv. You can see how a JavaScript shim can "implement" some of HTML......

35 of 318 | Resource String Editing Made Easy - I'm working on a project that involves building a library of string resources.  Some of these resource values are small, consisting of a sentence or two, other resources are actually embedded XSL's, and can be quite lengthy.  Visual Studio's built-in resource editor might suffice for other resource types, but is painfully inadequate for a large resource strings. My experience with the Visual Studio editor involves waiting 45-70 seconds for the initial data grid of strings to load, and another 30 seconds of re-rendering before the grid becomes responsive.  Clicking between resource entries can take up to 20 seconds, as the data grid resizes for each resource entry. All with a resource file......

36 of 318 | Altsoft N.V. - Altsoft N.V. has released Xml2PDF 2007 1.2, a payware Windows program for converting XSL-FO, SVG, WordML, and XHTML documents into PDF files. New features in this release include Custom XML in Word 2007 source and a COM interface....

37 of 318 | MIME Types - I often know I need a mime-type ( e.g. .deploy or .xaml ).. Extensions are easy, but the types are hard to remember ( application/octet-stream is my favorite guess )..    Now, courtesy of  Chris Knowlton, Windows Media Server PM, I don't have to guess... .323 text/h323 .aaf application/octet-stream .aca application/octet-stream .accdb application/msaccess .accde application/msaccess .accdt application/msaccess .acx application/internet-property-stream .afm application/octet-stream .ai application/postscript .aif audio/x-aiff .aifc audio/aiff .aiff audio/aiff ......

38 of 318 | Assentis DocFamily 4.0 Released - Assentis Technologies has released version 4.0 of their DocFamily product suite, which includes an XSL-FO and XFORMS designer, a J2EE based composition server, a repository server and an interactive document editor based on HTML. The 4.0 release provides increased support for high-volume XSL-FO printing. DocFamily 4.0 now supports XHTML, PCL, PDF/A and ZPL as output formats, in addition to AFP, PostScript and PDF. For interactive document editing, DocWrite added XForms support and extended WYSIWYG XSL-FO editing functionality....

39 of 318 | Assentis DocFamily 4.0 Released - Assentis Technologies has released version 4.0 of their DocFamily product suite, which includes an XSL-FO and XFORMS designer, a J2EE based composition server, a repository server and an interactive document editor based on HTML. The 4.0 release provides increased support for high-volume XSL-FO printing. DocFamily 4.0 now supports XHTML, PCL, PDF/A and ZPL as output formats, in addition to AFP, PostScript and PDF. For interactive document editing, DocWrite added XForms support and extended WYSIWYG XSL-FO editing functionality....

40 of 318 | Bibliography & Citations 1011 - Quick Introduction A couple of weeks ago we posted on bibliographies and citation, and it quickly became the most commented post we've ever had. Looks like we left a lot of questions unanswered! As a result, I'm going to create a series of posts which will (hopefully) address some of the questionsaround how to create a custom bibliography style in Word 2007. For starters, here are a few important directories to know about: The bibliography sources you create are all listed in the following file: %APPDATA%\Microsoft\Bibliography\Sources.xml NOTE: The \Bibliography\Sources.xml file won't exist until you create your first Bibliography source in Word 2007. All the bibliography styles ......

41 of 318 | A SQL Profiler trace Swiss Army Knife - Have you ever needed to find your most expensive queries and quickly grew weary of writing T-SQL against trace tables to try to ferret them out?  Have you ever had to wade through gigabytes of trace data just to find one ill-behaving query?  Have you ever struggled to decide what performance metrics really matter when analyzing Profiler traces:  duration, reads, writes, etc?  Today’s post is about a new tool Bart and I wrote to help you do all this and more.   Origins   The original concept behind Retrace was to create a simple tool to load a SQL Server Profiler trace file into a database ala the Relog tool that ships with Windows (and provides similar func......

42 of 318 | RenderX has posted a beta of INX2FO Plug-In 1.0. - RenderX has posted a beta of INX2FO Plug-In 1.0. This pug-in converts Adobe InDesign CS2 documents to XSL Formatting Objects. "The plug-in enables a user to use Adobe InDesign CS2 to design the layout, insert tags for the variable content, and generate outputs that can be merged with XML data. With the help of XEP, the documents are converted from their respective XML-based formats to XSL FO (XSLFO) and then to PDF or PostScript output."...

43 of 318 | ChangeStylesheets an IE5 Power Toy. - Power Toy to change to an alternate XSL stylesheet in an XML document....

44 of 318 | Translate. An HTML Application for XSL. - An HTML Application to convert XML/XSL to HTML using Microsoft, Saxon and XT parsers....

45 of 318 | Multi-file XSL Transformation Custom Tool for Visual Studio - An XSL Transformation Custom Tool for Visual Studio...

46 of 318 | A Couple Firefox Add-On Gems - This week I installed a few nifty Firefox Add-Ons, All-In-One-Gestures and  IE Tab.  I tried All-In-One-Gestures after watching how fast a co-worker was able to navigate on the web by using this Add-On. It allows you to right-click anywhere on a web page and move the mouse left to go backward or right to go for forward. Navigating this way is definitely much faster than using the browser toolbar buttons and helps me stay in a better flow when trying to quickly scan oodles of google results. For some reason I also really like the little red line affect that shows up on the page, but I'm easily impressed like that. The other Add-On, IE Tab, lets you view how a web page will b......

47 of 318 | XSL Transformation of CSDL into HTML - The attached XSL script neatly renders an Entity Framework CSDL file into HTML.   Below is the NorthwindEF model that we’ve been using for our samples, rendered using that XSL script:   Northwind Entity SetsEntity TypesComplex TypesAssociations Entity Sets Northwind Employees Northwind.Employee Territories Northwind.Territory Regions Northwind.Region Suppliers Northwind.Supplier Products Northwind.Product Categories Northwind.Category Customers Northwind.Customer Orders Northwind.Order OrderDetails Northwind.OrderDetail Entity Types Order Orde......

48 of 318 | Syntext has released Xsl-Status 1.3.0, an open source progress tracking tool for XSLT stylesheet developers Xsl-Status tracks which elements of an XML Schema are supported in the XSLT stylesheet, what the development status of XSLT templates is, and which template supports which XML element. - Syntext has released Xsl-Status 1.3.0, an open source progress tracking tool for XSLT stylesheet developers Xsl-Status tracks which elements of an XML Schema are supported in the XSLT stylesheet, what the development status of XSLT templates is, and which template supports which XML element. New features in this release include: More......

49 of 318 | XSL Tips - When writing XSL, it is often desirable to be able to see the raw XML that you're trying to transform.  This is especially helpful when customizing XSL for web parts such as content query.  The red text below show how to modify the ContentQueryMain.xsl file to do this for a Content Query web part:   <xsl:template match="/">    <textarea rows="20" cols="100">        <xsl:apply-templates/>    </textarea>    <xsl:call-template name="OuterTemplate" />/xsl:template><xsl:template match="node()|@*">    <!-- Copy the current node --> ......

50 of 318 | XSLT and XSS attacks - I noticed Robert Robbins was writing about XSS attacks using XSLT: It is possible to extend the power of XSLT using JavaScript embedded into the XSL file. Therefore any web application that allows the user to upload their own XSL file will be vulnerable to Cross Site Scripting attacks. Well, that's not exactly true, at least on Microsoft platform. Microsoft tackled this issue long time ago. Both MSXML 6.0 and .NET (since 2.0) don't allow script extensions and document() function in XSLT by default. One has to enable them explicitly. So the truth is s bit different: any web application that allows the user to upload their own XSL file and explicitly allow......