[Standards] XEP-0060: pubsub#dataform_xslt (yes, but why?)
teddsterr at outlook.com
Mon Aug 6 15:58:10 UTC 2018
Executing arbitrary code on the client? Kill it with fire!
I'd guess this is a case of trying to be overly-flexible in the hope of covering all possible unspecified use-cases.
I wouldn't even expect that most clients can execute XSLT. And if the aim is to generate a data-dependent form, is there a reason the form couldn't be generated server-side first?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Standards