[Bug 16151] Security concern about xsl:evaluate

https://www.w3.org/Bugs/Public/show_bug.cgi?id=16151

--- Comment #3 from Michael Kay <mike@saxonica.com> 2012-02-28 18:34:56 UTC ---
Instructions have always been able to return nodes, it's just slightly
inconvenient to access those nodes from within an XPath expression - you have
to bind the result of the instruction to a variable, or return it as the result
of a function.

A recent idea that's been suggested (no more than that) is to allow any
instruction to have an attribute bind="name" which makes the instruction act
like a variable declaration, binding its result to the given variable name.

-- 
Configure bugmail: https://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Tuesday, 28 February 2012 18:35:02 UTC