Re: document() function query

At 7:29 pm +0100 5/2/05, Peter Van der Beken wrote:
>Steve Benner wrote:
>>  I'd certainly welcome a chance to debate the logic of this with 
>>the Mozilla XSLT guys.
>
>There is not much to debate. It would be nice to allow whitelisting 
>but no one has contributed patches. Loading XML files from different 
>domains is a security risk allowing for example access to content 
>behind a firewall, so we won't allow it by default.
>

Thanks for pointing out the fact that this is a potential route 
around a firewall -- point taken! :) (Shows I'd make a lousy hacker, 
eh?)   I guess I shall just have to reformulate the URI as a foldback 
call to my server to be relayed onwards and the data returned that 
way.  And I suppose that has the added advantage of not revealing the 
full calling code (including Amazon SubscriptionId) within the XSLT 
too.

Many thanks to you both (Peter, Martin) for taking the time to 
address my lack of comprehension.

-Steve