Re: document() function query

Steve
For what it's worth I too would love this functionality.  I have a real-time
flood warning application written entirely in XSLT using stream flows from
the USGS, raingage data from another server, radar data from another, etc.
I works perfectly in IE but this restriction with no workaround effectively
kills any hope of ever using it with Mozilla browsers.
Bruce Rindahl

"Steve Benner" <[email protected]> wrote in message
news:[email protected]...
> At 7:29 pm +0100 5/2/05, Peter Van der Beken wrote:
> >Steve Benner wrote:
> >>  I'd certainly welcome a chance to debate the logic of this with
> >>the Mozilla XSLT guys.
> >
> >There is not much to debate. It would be nice to allow whitelisting
> >but no one has contributed patches. Loading XML files from different
> >domains is a security risk allowing for example access to content
> >behind a firewall, so we won't allow it by default.
> >
>
> Thanks for pointing out the fact that this is a potential route
> around a firewall -- point taken! :) (Shows I'd make a lousy hacker,
> eh?)   I guess I shall just have to reformulate the URI as a foldback
> call to my server to be relayed onwards and the data returned that
> way.  And I suppose that has the added advantage of not revealing the
> full calling code (including Amazon SubscriptionId) within the XSLT
> too.
>
> Many thanks to you both (Peter, Martin) for taking the time to
> address my lack of comprehension.
>
> -Steve