Executing arbitrary code on the client? Kill it with fire! I'd guess this is a case of trying to be overly-flexible in the hope of covering all possible unspecified use-cases.
I wouldn't even expect that most clients can execute XSLT. And if the aim is to generate a data-dependent form, is there a reason the form couldn't be generated server-side first?
_______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: standards-unsubscr...@xmpp.org _______________________________________________
