[Webkit-unassigned] [Bug 55357] XSLT extension functions

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=55357





--- Comment #4 from Alexey Proskuryakov <ap at webkit.org>  2011-03-02 11:32:12 PST ---
> Think of all the good things that has come from the EXSLT project, for instance.

Note that we don't enable EXSLT. That is tracked by bug 4079, but it's not clear if enabling it would do WebKit any good either.

> the only thing that we are aware of is when the callback initializes another transformation.

I've been thinking about changes to DOM tree specifically, but there are likely many attack vectors.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.