[replying on-list]
On 8/7/18 12:37 PM, Jonas Wielicki wrote:
> On Dienstag, 7. August 2018 18:28:45 CEST you wrote:
>> On 8/5/18 4:59 AM, Jonas Wielicki wrote:
>>> Hi all,
>>>
>>> So while running the XEP-0060 node_config data form [1] through the thing
>>>
>>> which builds aioxmpp code to process
On 8/5/18 4:59 AM, Jonas Wielicki wrote:
> Hi all,
>
> So while running the XEP-0060 node_config data form [1] through the thing
> which builds aioxmpp code to process it, I came across this funny field:
>
> type='text-single'
> label='The URL of an XSL transformation which
Executing arbitrary code on the client? Kill it with fire!
I'd guess this is a case of trying to be overly-flexible in the hope of
covering all possible unspecified use-cases.
I wouldn't even expect that most clients can execute XSLT. And if the aim is to
generate a data-dependent form, is ther
Hi all,
So while running the XEP-0060 node_config data form [1] through the thing
which builds aioxmpp code to process it, I came across this funny field:
I was at first confused, but then figured out that this is an XSLT which can
be applied to the payload in the node items to extract a XE
