W3C home > Mailing lists > Public > public-qt-comments@w3.org > February 2016

[Bug 29462] New: [xslt30] Add fn:transform and fn:load-xquery-module to dynamic evaluation feature

From: <bugzilla@jessica.w3.org>
Date: Mon, 15 Feb 2016 09:42:10 +0000
To: public-qt-comments@w3.org
Message-ID: <bug-29462-523@http.www.w3.org/Bugs/Public/>

            Bug ID: 29462
           Summary: [xslt30] Add fn:transform and fn:load-xquery-module to
                    dynamic evaluation feature
           Product: XPath / XQuery / XSLT
           Version: Candidate Recommendation
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: XSLT 3.0
          Assignee: mike@saxonica.com
          Reporter: mike@saxonica.com
        QA Contact: public-qt-comments@w3.org
  Target Milestone: ---

Probably too late for current meeting, but it just occurred to me whether it
would be beneficial to include fn:transform and fn:load-xquery-module as part
of that feature. They are new XPath 3.1 functions that dynamically run a
stylesheet or dynamically load an XQuery module.

They are therefore "in the same league" as dynamic evaluation and also from
usability standpoint, they exhibit the same security vulnerability issues. I
think it makes sense to switch them all on or off and that this can be tested
as for xsl:evaluate with the same (or separate?) system-property names.

You are receiving this mail because:
You are the QA Contact for the bug.
Received on Monday, 15 February 2016 09:42:13 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 16:57:59 UTC