Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

XSLT security problems

13 views
Skip to first unread message

Alessandro

unread,
Oct 14, 2006, 3:41:08 PM10/14/06
to
Hi,
I'm trying to load into a browser widget an XML with a xsl stylesheet within, but I got this error:
"Error loading stylesheet: An XSLT stylesheet load was blocked for security reasons."

Is there anything I can do for allow xsl into xml?

Axel Hecht

unread,
Oct 15, 2006, 5:13:37 PM10/15/06
to

You're running into a security check that we have put up to safeguard
against cross-site-scripting attacks.

We're working on a scheme to allow servers to open up their site for
cross-site access, but that's not done yet.

Copy the XSLT so that it lives on the same server as the webapp and the
xml, and you should be good to go

Axel

Alessandro

unread,
Oct 15, 2006, 5:48:50 PM10/15/06
to

Thank you for the answer, but I'm creating a desktop application with Xulrunner and so the xml/xsl will be stored on the local machine

0 new messages