[Standards] XEP-0060: pubsub#dataform_xslt (yes, but why?)

Tedd Sterr teddsterr at outlook.com
Mon Aug 6 15:58:10 UTC 2018


Executing arbitrary code on the client? Kill it with fire!

I'd guess this is a case of trying to be overly-flexible in the hope of covering all possible unspecified use-cases.

I wouldn't even expect that most clients can execute XSLT. And if the aim is to generate a data-dependent form, is there a reason the form couldn't be generated server-side first?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.jabber.org/pipermail/standards/attachments/20180806/42e48b71/attachment.html>


More information about the Standards mailing list