[tdwg-tapir] xslt stylesheets

Markus Döring m.doering at bgbm.org
Tue Feb 20 13:12:31 CET 2007

we had a discussion at the developer meeting last week about security  
issues when allowing arbitrary xslts to be included in TAPIR responses.
This allows people to transmit illegal content from your service  
domain. When playing with Firefox I found they dont even allow to  
apply stylesheets that come from a different domain as the XML  
containing the PI:


This is very inconvenient, but I guess TAPIR services could behave  
the same way. Apply stylesheets only if they are coming from the same  

Have a nice week everyone,

More information about the tdwg-tag mailing list