xsltforms-support Mailing List for XSLTForms (Page 63)
Brought to you by:
alain-couthures
Menu
▾
▴
xsltforms-support — XSLTForms support list
You can subscribe to this list here.
| 2009 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
(6) |
Jun
(9) |
Jul
(16) |
Aug
(5) |
Sep
(43) |
Oct
(36) |
Nov
(58) |
Dec
(43) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2010 |
Jan
(79) |
Feb
(81) |
Mar
(107) |
Apr
(93) |
May
(85) |
Jun
(54) |
Jul
(64) |
Aug
(54) |
Sep
(45) |
Oct
(53) |
Nov
(34) |
Dec
(77) |
| 2011 |
Jan
(56) |
Feb
(53) |
Mar
(52) |
Apr
(66) |
May
(44) |
Jun
(16) |
Jul
(28) |
Aug
(5) |
Sep
(15) |
Oct
(21) |
Nov
(51) |
Dec
(46) |
| 2012 |
Jan
(16) |
Feb
(38) |
Mar
(47) |
Apr
(45) |
May
(41) |
Jun
(41) |
Jul
(72) |
Aug
(17) |
Sep
(10) |
Oct
(16) |
Nov
(29) |
Dec
(30) |
| 2013 |
Jan
(25) |
Feb
(13) |
Mar
(20) |
Apr
(25) |
May
(34) |
Jun
(8) |
Jul
(12) |
Aug
(9) |
Sep
(21) |
Oct
(19) |
Nov
(6) |
Dec
(2) |
| 2014 |
Jan
(14) |
Feb
(8) |
Mar
(7) |
Apr
(13) |
May
(33) |
Jun
(13) |
Jul
(6) |
Aug
(5) |
Sep
(5) |
Oct
(34) |
Nov
(7) |
Dec
|
| 2015 |
Jan
(1) |
Feb
(6) |
Mar
(17) |
Apr
(12) |
May
(10) |
Jun
(18) |
Jul
(31) |
Aug
(9) |
Sep
(3) |
Oct
(6) |
Nov
(19) |
Dec
(1) |
| 2016 |
Jan
(18) |
Feb
(4) |
Mar
(13) |
Apr
(19) |
May
|
Jun
(17) |
Jul
(7) |
Aug
|
Sep
(3) |
Oct
(6) |
Nov
(3) |
Dec
|
| 2017 |
Jan
(5) |
Feb
(17) |
Mar
(4) |
Apr
(8) |
May
(3) |
Jun
|
Jul
(8) |
Aug
(2) |
Sep
|
Oct
(5) |
Nov
(6) |
Dec
(4) |
| 2018 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(6) |
Nov
|
Dec
(1) |
| 2019 |
Jan
|
Feb
|
Mar
(4) |
Apr
(2) |
May
(4) |
Jun
|
Jul
|
Aug
(2) |
Sep
(7) |
Oct
|
Nov
|
Dec
|
| 2020 |
Jan
(13) |
Feb
(17) |
Mar
(8) |
Apr
(11) |
May
(15) |
Jun
(11) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(6) |
| 2021 |
Jan
(9) |
Feb
(26) |
Mar
(17) |
Apr
|
May
(7) |
Jun
(18) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(10) |
| 2022 |
Jan
|
Feb
(1) |
Mar
|
Apr
|
May
(3) |
Jun
|
Jul
|
Aug
(2) |
Sep
(3) |
Oct
(2) |
Nov
(10) |
Dec
(1) |
| 2023 |
Jan
(10) |
Feb
|
Mar
(7) |
Apr
(8) |
May
(3) |
Jun
|
Jul
|
Aug
|
Sep
(8) |
Oct
(11) |
Nov
(8) |
Dec
(5) |
| 2024 |
Jan
(7) |
Feb
(3) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2025 |
Jan
(4) |
Feb
(2) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: COUTHURES A. <ala...@ag...> - 2011-04-01 12:44:28
|
I'm afraid this problem is located in exist-db processing because this form works well when put in file... -Alain Le 01/04/2011 14:37, Raja a écrit : > Hi Alain !!!! > > There is no use ,, Same problem coming , no improvements ... > PS: Actually i tested the eXist-db xforms sample part , that is > working , but i don't know what is the difference between these two > codes . both are same... > By > Rajamani M. > > On 04/01/11, *COUTHURES Alain * <ala...@ag...> wrote: >> >> Isn't it just because xmlns="" has been omitted for the data element??? >> >> -Alain >> >> Le 01/04/2011 13:43, Raja a écrit : >> >>> Sorry Alain !!! >>> >>> Here is my sample code !!! >>> >>> *xquery version "1.0"; >>> declare option exist:serialize "method=xhtml media-type=text/html >>> indent=no"; >>> >>> let $form := >>> <html xmlns="http://www.w3.org/1999/xhtml" >>> xmlns:ev="http://www.w3.org/2001/xml-events" >>> xmlns:xf="http://www.w3.org/2002/xforms"> >>> <head> >>> <title>XForms Template</title> >>> <xf:model> >>> <xf:instance xmlns="" id="save-data"> >>> <data> >>> <name>John Smith</name> >>> </data> >>> </xf:instance> >>> </xf:model> >>> </head> >>> <body> >>> <h1>XForms Test Program</h1> >>> <xf:input ref="name"> >>> <xf:label>Name: </xf:label> >>> </xf:input> >>> </body> >>> </html> >>> >>> let $transform := 'xmldb:///db/vserve/xsltforms/xsltforms.xsl' >>> >>> let $params := >>> <parameters> >>> <param name="omit-xml-declaration" value="yes"/> >>> <param name="indent" value="no"/> >>> <param name="media-type" value="text/html"/> >>> <param name="method" value="xhtml"/> >>> <param name="baseuri" value="/exist/rest/db/vserve/xsltforms/"/> >>> </parameters> >>> >>> let $serialization-options := 'method=xml media-type=text/html >>> omit-xml-declaration=yes indent=no' >>> >>> return >>> transform:transform($form, $transform, $params, >>> $serialization-options)* >>> >>> Also i tried the client side transformation .. But Same problem >>> occurred. >>> >>> By >>> Rajamani marimuthu >>> >>> >>> On 04/01/11, *COUTHURES Alain * <ala...@ag...> >>> <ala...@ag...> wrote: >>>> >>>> Hi Raja, >>>> >>>> Sorry, it is not possible to debug a form with just an image of the >>>> error message. >>>> >>>> Can you please send me the source file of the form? >>>> >>>> Thanks! >>>> >>>> -Alain >>>> >>>> Le 01/04/2011 09:24, Raja a écrit : >>>> >>>>> Hi XSLTForms members!!! >>>>> >>>>> Hi members !!! so far we using XSLTForms for the XRX application >>>>> development and working fine in all browsers except the IE. While >>>>> running a small sample which u have given in the Site also not >>>>> working.. Pls suggest the possible workaround to solve this issue >>>>> ... even we used the methods which has mentioned in the XSLTForms >>>>> with eXist-db wiki page. >>>>> >>>>> Actually we facing type error problem so far in IE. But the same >>>>> form working fine in the rest of the browsers .. pls see the >>>>> attached image and doc file for the error message. How to solve >>>>> this pbm. >>>>> >>>>> By >>>>> >>>>> -- >>>>> Rajamani Marimuthu >>>>> Junior Research Fellow-JRF >>>>> NIC -Open Technology Centre >>>>> Rajaji Bhavan >>>>> Besant Nagar, >>>>> Chennai - 90 >>>>> Cell : 9791125383 >>>>> >>>> >>> >>> -- >>> Rajamani Marimuthu >>> Junior Research Fellow-JRF >>> NIC -Open Technology Centre >>> Rajaji Bhavan >>> Besant Nagar, >>> Chennai - 90 >>> Cell : 9791125383 >>> >> > > -- > Rajamani Marimuthu > Junior Research Fellow-JRF > NIC -Open Technology Centre > Rajaji Bhavan > Besant Nagar, > Chennai - 90 > Cell : 9791125383 > |
|
From: Raja <m.r...@ni...> - 2011-04-01 12:37:03
|
Hi Alain !!!! There is no use ,, Same problem coming , no improvements ... PS: Actually i tested the eXist-db xforms sample part , that is working , but i don't know what is the difference between these two codes . both are same... By Rajamani M. On 04/01/11, COUTHURES Alain <ala...@ag...> wrote: > > > > > > > > > > > Isn't it just because xmlns="" has been omitted for the data > element??? > > > > -Alain > > > > Le 01/04/2011 13:43, Raja a écrit : > > > > > > > > Sorry > > Alain !!! > > > > > > > > Here is my sample code !!! > > > > > > > > xquery version > > "1.0"; > > > > declare option exist:serialize "method=xhtml > > media-type=text/html indent=no"; > > > > > > > > let $form := > > > > <html xmlns="http://www.w3.org/1999/xhtml"(http://www.w3.org/1999/xhtml) > > > > xmlns:ev="http://www.w3.org/2001/xml-events"(http://www.w3.org/2001/xml-events) > > > > xmlns:xf="http://www.w3.org/2002/xforms"(http://www.w3.org/2002/xforms)> > > > > <head> > > > > <title>XForms Template</title> > > > > <xf:model> > > > > <xf:instance xmlns="" id="save-data"> > > > > <data> > > > > <name>John Smith</name> > > > > </data> > > > > </xf:instance> > > > > </xf:model> > > > > </head> > > > > <body> > > > > <h1>XForms Test Program</h1> > > > > <xf:input ref="name"> > > > > <xf:label>Name: </xf:label> > > > > </xf:input> > > > > </body> > > > > </html> > > > > > > > > let $transform := 'xmldb:///db/vserve/xsltforms/xsltforms.xsl' > > > > > > > > let $params := > > > > <parameters> > > > > <param name="omit-xml-declaration" value="yes"/> > > > > <param name="indent" value="no"/> > > > > <param name="media-type" value="text/html"/> > > > > <param name="method" value="xhtml"/> > > > > <param name="baseuri" > > value="/exist/rest/db/vserve/xsltforms/"/> > > > > </parameters> > > > > > > > > let $serialization-options := 'method=xml media-type=text/html > > omit-xml-declaration=yes indent=no' > > > > > > > > return > > > > transform:transform($form, $transform, $params, > > $serialization-options) > > > > > > > > Also i tried the client side transformation .. But Same problem > > occurred. > > > > > > > > By > > > > Rajamani marimuthu > > > > > > > > > > > > On 04/01/11, COUTHURES Alain > > <ala...@ag...> <ala...@ag...> wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Hi Raja, > > > > > > > > > > > > Sorry, it is not possible to debug a form with > > > just an image of the error message. > > > > > > > > > > > > Can you please send me the source file of the > > > form? > > > > > > > > > > > > Thanks! > > > > > > > > > > > > -Alain > > > > > > > > > > > > Le 01/04/2011 09:24, Raja a écrit : > > > > > > > > > > > > > > > > > > Hi XSLTForms members!!! > > > > > > > > > > > > > > > > Hi members !!! so far we using XSLTForms for > > > > the XRX application development and working > > > > fine in all browsers except the IE. While > > > > running a small sample which u have given in > > > > the Site also not working.. Pls suggest the > > > > possible workaround to solve this issue ... > > > > even we used the methods which has mentioned > > > > in the XSLTForms with eXist-db wiki page. > > > > > > > > > > > > > > > > Actually we facing type error problem so far > > > > in IE. But the same form working fine in the > > > > rest of the browsers .. pls see the attached > > > > image and doc file for the error message. > > > > How to solve this pbm. > > > > > > > > > > > > > > > > By > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > Rajamani Marimuthu > > > > > > > > Junior Research Fellow-JRF > > > > > > > > NIC -Open Technology Centre > > > > > > > > Rajaji Bhavan > > > > > > > > Besant Nagar, > > > > > > > > Chennai - 90 > > > > > > > > Cell : 9791125383 > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > Rajamani Marimuthu > > > > Junior Research Fellow-JRF > > > > NIC -Open Technology Centre > > > > Rajaji Bhavan > > > > Besant Nagar, > > > > Chennai - 90 > > > > Cell : 9791125383 > > > > > > > > > > > > > > > > -- Rajamani Marimuthu Junior Research Fellow-JRF NIC -Open Technology Centre Rajaji Bhavan Besant Nagar, Chennai - 90 Cell : 9791125383 |
|
From: COUTHURES A. <ala...@ag...> - 2011-04-01 12:12:23
|
Isn't it just because xmlns="" has been omitted for the data element??? -Alain Le 01/04/2011 13:43, Raja a écrit : > Sorry Alain !!! > > Here is my sample code !!! > > *xquery version "1.0"; > declare option exist:serialize "method=xhtml media-type=text/html > indent=no"; > > let $form := > <html xmlns="http://www.w3.org/1999/xhtml" > xmlns:ev="http://www.w3.org/2001/xml-events" > xmlns:xf="http://www.w3.org/2002/xforms"> > <head> > <title>XForms Template</title> > <xf:model> > <xf:instance xmlns="" id="save-data"> > <data> > <name>John Smith</name> > </data> > </xf:instance> > </xf:model> > </head> > <body> > <h1>XForms Test Program</h1> > <xf:input ref="name"> > <xf:label>Name: </xf:label> > </xf:input> > </body> > </html> > > let $transform := 'xmldb:///db/vserve/xsltforms/xsltforms.xsl' > > let $params := > <parameters> > <param name="omit-xml-declaration" value="yes"/> > <param name="indent" value="no"/> > <param name="media-type" value="text/html"/> > <param name="method" value="xhtml"/> > <param name="baseuri" value="/exist/rest/db/vserve/xsltforms/"/> > </parameters> > > let $serialization-options := 'method=xml media-type=text/html > omit-xml-declaration=yes indent=no' > > return > transform:transform($form, $transform, $params, > $serialization-options)* > > Also i tried the client side transformation .. But Same problem occurred. > > By > Rajamani marimuthu > > > On 04/01/11, *COUTHURES Alain * <ala...@ag...> wrote: >> >> Hi Raja, >> >> Sorry, it is not possible to debug a form with just an image of the >> error message. >> >> Can you please send me the source file of the form? >> >> Thanks! >> >> -Alain >> >> Le 01/04/2011 09:24, Raja a écrit : >> >>> Hi XSLTForms members!!! >>> >>> Hi members !!! so far we using XSLTForms for the XRX application >>> development and working fine in all browsers except the IE. While >>> running a small sample which u have given in the Site also not >>> working.. Pls suggest the possible workaround to solve this issue >>> ... even we used the methods which has mentioned in the XSLTForms >>> with eXist-db wiki page. >>> >>> Actually we facing type error problem so far in IE. But the same >>> form working fine in the rest of the browsers .. pls see the >>> attached image and doc file for the error message. How to solve this >>> pbm. >>> >>> By >>> >>> -- >>> Rajamani Marimuthu >>> Junior Research Fellow-JRF >>> NIC -Open Technology Centre >>> Rajaji Bhavan >>> Besant Nagar, >>> Chennai - 90 >>> Cell : 9791125383 >>> >> > > -- > Rajamani Marimuthu > Junior Research Fellow-JRF > NIC -Open Technology Centre > Rajaji Bhavan > Besant Nagar, > Chennai - 90 > Cell : 9791125383 > |
|
From: Raja <m.r...@ni...> - 2011-04-01 11:44:58
|
Sorry Alain !!! Here is my sample code !!! xquery version "1.0"; declare option exist:serialize "method=xhtml media-type=text/html indent=no"; let $form := <html xmlns="http://www.w3.org/1999/xhtml" xmlns:ev="http://www.w3.org/2001/xml-events" xmlns:xf="http://www.w3.org/2002/xforms"> <head> <title>XForms Template</title> <xf:model> <xf:instance xmlns="" id="save-data"> <data> <name>John Smith</name> </data> </xf:instance> </xf:model> </head> <body> <h1>XForms Test Program</h1> <xf:input ref="name"> <xf:label>Name: </xf:label> </xf:input> </body> </html> let $transform := 'xmldb:///db/vserve/xsltforms/xsltforms.xsl' let $params := <parameters> <param name="omit-xml-declaration" value="yes"/> <param name="indent" value="no"/> <param name="media-type" value="text/html"/> <param name="method" value="xhtml"/> <param name="baseuri" value="/exist/rest/db/vserve/xsltforms/"/> </parameters> let $serialization-options := 'method=xml media-type=text/html omit-xml-declaration=yes indent=no' return transform:transform($form, $transform, $params, $serialization-options) Also i tried the client side transformation .. But Same problem occurred. By Rajamani marimuthu On 04/01/11, COUTHURES Alain <ala...@ag...> wrote: > > > > > > > > > > > Hi Raja, > > > > Sorry, it is not possible to debug a form with just an image of the > error message. > > > > Can you please send me the source file of the form? > > > > Thanks! > > > > -Alain > > > > Le 01/04/2011 09:24, Raja a écrit : > > > > > > > > Hi > > XSLTForms members!!! > > > > > > > > Hi members !!! so far we using XSLTForms for the XRX application > > development and working fine in all browsers except the IE. > > While running a small sample which u have given in the Site also > > not working.. Pls suggest the possible workaround to solve this > > issue ... even we used the methods which has mentioned in the > > XSLTForms with eXist-db wiki page. > > > > > > > > Actually we facing type error problem so far in IE. But the same > > form working fine in the rest of the browsers .. pls see the > > attached image and doc file for the error message. How to solve > > this pbm. > > > > > > > > By > > > > > > > > > > -- > > > > Rajamani Marimuthu > > > > Junior Research Fellow-JRF > > > > NIC -Open Technology Centre > > > > Rajaji Bhavan > > > > Besant Nagar, > > > > Chennai - 90 > > > > Cell : 9791125383 > > > > > > > > > > > > > > > > -- Rajamani Marimuthu Junior Research Fellow-JRF NIC -Open Technology Centre Rajaji Bhavan Besant Nagar, Chennai - 90 Cell : 9791125383 |
|
From: COUTHURES A. <ala...@fr...> - 2011-04-01 11:44:01
|
Chester, > > Sorry, I'm no security expert, but I don't get how anyone could crash > the system. When running the browser as an ordinary user, all > processes inherit my privileges, so if my xforms script tries to write > somewhere dangerous, the OS will prevent this. When I run the example > program under the Firefox xforms extension, it creates the file with > me as the owner. I would not be able to overwrite any file that I > don't have OS permissions to write to. > In order to be able to do this, xlstforms would have to be running > setuid, and I'm quite sure that it's not. Unfortunately, when creating Windows, Microsoft didn't want to declare a default ordinary user but an administrator and, today, a huge portion of browsers are running with maximal permissions. That's why Javascript is strongly restricted. I didn't test it myself but I think that using a Java applet allows anything so the worst too! > > No, I'm not sure what you're suggesting, but I don't want a file > dialog box at all. The dialog is appropriate for the <upload/> > control, but not the <submission/> element. There the file name is > hard-coded (or calculated). The only secure possibility for me is to allow to inhibit the file dialog just when the domain is localhost or when the page is in fact itself loaded directly from the local disk. Would it be OK for you? > Many examples of this exist in sample code in xforms tutorials. Here's > a simple example from Steven Pemberton's tutorial > <http://www.w3.org/MarkUp/Forms/2010/xforms11-for-html-authors/part2.html#Repeat>: > > <model> > <instance src="todo-list.xml"/> > <submission method="put" action="todo-list.xml" replace="none"/> > <bind nodeset="todo/date" type="xsd:date"/> > </model> > > In this example a do list is read from a file and written back. The OS > will not allow the file write unless the user running the browser has > privileges to do the write. This is not a file:// example but an XRX example: the submission is sent to the server not to the local disk. > > Now what if a malicious (or ignorant) xforms designer sent me an xform > that tried to write to someplace bad? First, I would have to install > the host document somewhere (we're only talking about host documents > that are opened with "file://" URL's; if the document were opened with > "http://", then the browser would prohibit local writes as a > cross-domain issue). The applet allows to save locally even if the document is opened with "http://" ! > > Then, after saving the host document as a file, I would have to log > in as root to run the browser or somehow allow the privileges to be > escalated by typing in a password. If I were stupid enough to do that > (and sure, it is possible!), one thing that would mitigate the damage > here would be if xlstforms were to only allow writes to the current > directory or its subdirectories, i.e., prohibit access to any path > with ".." in it. I noticed that the Firefox browser enforces that, in > fact it will not follow such a path for read references either. Linux is surely much protective that Windows ;-) Thanks! -Alain |
|
From: COUTHURES A. <ala...@ag...> - 2011-04-01 11:42:27
|
Hi Raja, Sorry, it is not possible to debug a form with just an image of the error message. Can you please send me the source file of the form? Thanks! -Alain Le 01/04/2011 09:24, Raja a écrit : > Hi XSLTForms members!!! > > Hi members !!! so far we using XSLTForms for the XRX application > development and working fine in all browsers except the IE. While > running a small sample which u have given in the Site also not > working.. Pls suggest the possible workaround to solve this issue ... > even we used the methods which has mentioned in the XSLTForms with > eXist-db wiki page. > > Actually we facing type error problem so far in IE. But the same form > working fine in the rest of the browsers .. pls see the attached image > and doc file for the error message. How to solve this pbm. > > By > > -- > Rajamani Marimuthu > Junior Research Fellow-JRF > NIC -Open Technology Centre > Rajaji Bhavan > Besant Nagar, > Chennai - 90 > Cell : 9791125383 > |
|
From: Raja <m.r...@ni...> - 2011-04-01 05:29:19
|
Hi XSLTForms users and Alain !!! We are happy to see and hear the continuous effort of the XSLTForms development and off-course the very latest improvement of the XSLTForms-beta 3 with File option support. So, Here i would like to ask about the remaining part of the development in the current situation . Is there Upload control support enabled in the latest version? like file:// option. and where i have to find the latest trunk version of the code. By -- Rajamani Marimuthu Junior Research Fellow-JRF NIC -Open Technology Centre Rajaji Bhavan Besant Nagar, Chennai - 90 Cell : 9791125383 |
|
From: Chester W. <ch...@de...> - 2011-03-31 21:38:11
|
Alain, Thanks very much for the reply. On Thu, Mar 31, 2011 at 1:19 PM, COUTHURES Alain < ala...@ag...> wrote: > >> I don't want to include in XSLTForms an applet that would permit anyone to > crash a system. Sorry, I'm no security expert, but I don't get how anyone could crash the system. When running the browser as an ordinary user, all processes inherit my privileges, so if my xforms script tries to write somewhere dangerous, the OS will prevent this. When I run the example program under the Firefox xforms extension, it creates the file with me as the owner. I would not be able to overwrite any file that I don't have OS permissions to write to. In order to be able to do this, xlstforms would have to be running setuid, and I'm quite sure that it's not. > > >> The default behavior is to propose the last file name which was used. You >> want to change this with your own file name, is it right? > > > It is already possible to enter a full name such as > "file://test/myfile.xml" but I don't think it's a recommended notation. This > full name will be used to initialize the file dialog box. > > If so, you could also need to get the chosen fullname from the latest file > dialog box. This is not specified in the XForms Recommendation but surely > the event() function could be used for that. Would you like me to ask the > W3C Forms Work Group about that? > > No, I'm not sure what you're suggesting, but I don't want a file dialog box at all. The dialog is appropriate for the <upload/> control, but not the <submission/> element. There the file name is hard-coded (or calculated). Many examples of this exist in sample code in xforms tutorials. Here's a simple example from Steven Pemberton's tutorial<http://www.w3.org/MarkUp/Forms/2010/xforms11-for-html-authors/part2.html#Repeat> : <model> <instance src="todo-list.xml"/> <submission method="put" action="todo-list.xml" replace="none"/> <bind nodeset="todo/date" type="xsd:date"/> </model> In this example a do list is read from a file and written back. The OS will not allow the file write unless the user running the browser has privileges to do the write. Now what if a malicious (or ignorant) xforms designer sent me an xform that tried to write to someplace bad? First, I would have to install the host document somewhere (we're only talking about host documents that are opened with "file://" URL's; if the document were opened with "http://", then the browser would prohibit local writes as a cross-domain issue). Then, after saving the host document as a file, I would have to log in as root to run the browser or somehow allow the privileges to be escalated by typing in a password. If I were stupid enough to do that (and sure, it is possible!), one thing that would mitigate the damage here would be if xlstforms were to only allow writes to the current directory or its subdirectories, i.e., prohibit access to any path with ".." in it. I noticed that the Firefox browser enforces that, in fact it will not follow such a path for read references either. So that is the only security enforcement that xlstforms needs to do IMHO. Thanks for listening Chester Wood Thanks! > > -Alain > > |
|
From: COUTHURES A. <ala...@ag...> - 2011-03-31 19:18:34
|
Chester, > Thanks for the tip. That works, sort of. But it is very clumsy. Is > there anything that can be done to ease the security? I think that it is important to let know that a file is about to be read/written in a folder and that it is still possible to abort this. I don't want to include in XSLTForms an applet that would permit anyone to crash a system. > > In this case, there is not really any security issue at all. I'm > loading my xforms page using a file: URL from a local directory, and > using src to pull in instance data from a file in the same directory. > My xforms will modify the data and when I click Submit, I want to > write the modified data out to the same file. Very simple. The user > should not have the opportunity to write it to some other file, as > this could create a lot of confusion. The default behavior is to propose the last file name which was used. You want to change this with your own file name, is it right? It is already possible to enter a full name such as "file://test/myfile.xml" but I don't think it's a recommended notation. This full name will be used to initialize the file dialog box. If so, you could also need to get the chosen fullname from the latest file dialog box. This is not specified in the XForms Recommendation but surely the event() function could be used for that. Would you like me to ask the W3C Forms Work Group about that? Thanks! -Alain |
|
From: Chester W. <ch...@de...> - 2011-03-31 15:23:17
|
Thanks for the tip. That works, sort of. But it is very clumsy. Is there anything that can be done to ease the security? In this case, there is not really any security issue at all. I'm loading my xforms page using a file: URL from a local directory, and using src to pull in instance data from a file in the same directory. My xforms will modify the data and when I click Submit, I want to write the modified data out to the same file. Very simple. The user should not have the opportunity to write it to some other file, as this could create a lot of confusion. thanks, chester On Thu, Mar 31, 2011 at 2:30 AM, COUTHURES Alain < ala...@ag...> wrote: > Chester, > > I'm trying to learn xforms and have been going through some of the >> examples in the wiki book. The simple submit example at >> http://en.wikibooks.org/wiki/XForms/Submit that puts a file to the >> current directory does not work on either Firefox or Safari. I'm using the >> example verbatim (adding the xsltforms invocation at the top of the file of >> course) and I've tried changing the form of the filename, using >> action="file:./myData.xml", for example. I've also tried using a >> file:///absolute_pathname and that makes it worse. >> > Please try with just "file://". For security reasons, XSLTForms will always > prompt the user for the folder and name of the file. > > Thanks! > > -Alain > > |
|
From: <st...@sa...> - 2011-03-31 14:49:13
|
Yes, that looks really good--thanks very much for your response! Best wishes, Steve Quoting COUTHURES Alain <ala...@ag...>: > Steve, > > XSLTForms still has problems with repeats within tables when there > are some extra lines at the beginning or at the end. > > Using THEAD, TBODY and TFOOT should better work but, for your > examples, I prefered using XPath predicates for having just a repeat > element: > > xsltforms-repeat-sans-table.xml: > > <?xml-stylesheet href="xsltforms/xsltforms.xsl" type="text/xsl"?> > <html xmlns="http://www.w3.org/1999/xhtml" > xmlns:xforms="http://www.w3.org/2002/xforms" > xmlns:ev="http://www.w3.org/2001/xml-events"> > <head> > <title>OASE Form</title> > <link rel="stylesheet" type="text/css" href="/css/oase.css"/> > <script type="text/javascript" src="/js/oase.js"> > </script> > <xforms:model> > <xforms:instance id="search"> > <xse xmlns=""> > <project>sans-table</project> > <search> > <index>txt</index> > <binop> > <key/> > <filter type="position" value="any"/> > </binop> > </search> > <result count="0" list="oase"> > <url>javascript:oasePager('etcsri','oase')</url> > </result> > </xse> > </xforms:instance> > <xforms:instance id="new-search"> > <search xmlns="" type="include"> > <index></index> > <binop> > <key/> > <filter type="position" value="any"/> > </binop> > </search> > </xforms:instance> > <xforms:instance id="new-binop"> > <binop xmlns="" invert="no" type="and"> > <key/> > <filter type="position" value="any"/> > </binop> > </xforms:instance> > <xforms:submission action="xxx" method="post" id="go" > mediatype="application/xml" replace="instance"> > <xforms:action ev:event="xforms-submit-done"> > <xforms:load> > <xforms:resource > value="instance('search')/result"/> > </xforms:load> > </xforms:action> > </xforms:submission> > </xforms:model> > </head> > <body> > <h1> > <xforms:output value="project"/> Search: > <xforms:output value="result/@count"/> results so far > </h1> > <xforms:repeat nodeset="search" id="search-repeat"> > <fieldset> > <legend> > <xforms:group ref=".[count(preceding-sibling::search)=0]"> > Search index > </xforms:group> > <xforms:group ref=".[count(preceding-sibling::search)>0]"> > <xforms:select1 ref="@type"> > <xforms:item> > <xforms:label>include</xforms:label> > <xforms:value>and</xforms:value> > </xforms:item> > </xforms:select1> > results of searching > </xforms:group> > <xforms:select1 ref="index"> > <xforms:item> > <xforms:label>transliterations</xforms:label> > <xforms:value>txt</xforms:value> > </xforms:item> > </xforms:select1> > </legend> > > <xforms:group ref=".[index[.='txt']]"> > <xforms:repeat nodeset="binop" id="binop-repeat"> > <xforms:output value="if(.[not(preceding-sibling::binop)]/key,'For ','')"/> > <xforms:select1 ref=".[preceding-sibling::binop]/@type"> > <xforms:item> > <xforms:label>and</xforms:label> > <xforms:value>and</xforms:value> > </xforms:item> > </xforms:select1> > <xforms:input ref="key"/> > <xforms:select1 ref="filter[@type='position']/@value"> > <xforms:item> > <xforms:label>Any position</xforms:label> > <xforms:value>any</xforms:value> > </xforms:item> > </xforms:select1> > </xforms:repeat> > </xforms:group> > > <xforms:trigger> > <xforms:label>Add another search term</xforms:label> > <xforms:insert ev:event="DOMActivate" > context="." > nodeset="search/binop[last()]" > position="after" > origin="instance('new-binop')"/> > </xforms:trigger> > > </fieldset> > </xforms:repeat> > > <xforms:trigger> > <xforms:label>Add a search</xforms:label> > <xforms:insert ev:event="DOMActivate" > context="." nodeset="search" > origin="instance('new-search')"/> > </xforms:trigger> > <hr/> > <xforms:submit submission="go"> > <xforms:label>GO</xforms:label> > </xforms:submit> > </body> > </html> > > xsltforms-repeat-with-table.xml: > > <?xml-stylesheet href="xsltforms/xsltforms.xsl" type="text/xsl"?> > <html xmlns="http://www.w3.org/1999/xhtml" > xmlns:xforms="http://www.w3.org/2002/xforms" > xmlns:ev="http://www.w3.org/2001/xml-events"> > <head> > <title>OASE Form</title> > <link rel="stylesheet" type="text/css" href="/css/oase.css"/> > <script type="text/javascript" src="/js/oase.js"> > </script> > <xforms:model> > <xforms:instance id="search"> > <xse xmlns=""> > <project>with-table</project> > <search> > <index>txt</index> > <binop> > <key/> > <filter type="position" value="any"/> > </binop> > </search> > <result count="0" list="oase"> > <url>javascript:oasePager('etcsri','oase')</url> > </result> > </xse> > </xforms:instance> > <xforms:instance id="new-search"> > <search type="include"> > <index></index> > <binop> > <key/> > <filter type="position" value="any"/> > </binop> > </search> > </xforms:instance> > <xforms:instance id="new-binop"> > <binop invert="no" type="and"> > <key/> > <filter type="position" value="any"/> > </binop> > </xforms:instance> > <xforms:submission action="xxx" method="post" id="go" > mediatype="application/xml" replace="instance"> > <xforms:action ev:event="xforms-submit-done"> > <xforms:load> > <xforms:resource > value="instance('search')/result"/> > </xforms:load> > </xforms:action> > </xforms:submission> > </xforms:model> > </head> > <body> > <h1> > <xforms:output value="project"/> Search: > <xforms:output value="result/@count"/> results so far > </h1> > <xforms:repeat nodeset="search" id="search-repeat"> > <fieldset> > <legend> > <xforms:group ref=".[count(preceding-sibling::search)=0]"> > Search index > </xforms:group> > <xforms:group ref=".[count(preceding-sibling::search)>0]"> > <xforms:select1 ref="@type"> > <xforms:item> > <xforms:label>include</xforms:label> > <xforms:value>and</xforms:value> > </xforms:item> > </xforms:select1> > results of searching > </xforms:group> > <xforms:select1 ref="index"> > <xforms:item> > <xforms:label>transliterations</xforms:label> > <xforms:value>txt</xforms:value> > </xforms:item> > </xforms:select1> > </legend> > > <xforms:group ref=".[index[.='txt']]"> > <table> > <tbody> > <xforms:repeat nodeset="binop" id="binop-repeat"> > <tr> > <td> > <xforms:output value="if(.[not(preceding-sibling::binop)]/key,'For ','')"/> > <xforms:select1 ref=".[preceding-sibling::binop]/@type"> > <xforms:item> > <xforms:label>and</xforms:label> > <xforms:value>and</xforms:value> > </xforms:item> > </xforms:select1> > <xforms:input ref="key"/> > </td> > <td> > <xforms:select1 ref="filter[@type='position']/@value"> > <xforms:item> > <xforms:label>Any position</xforms:label> > <xforms:value>any</xforms:value> > </xforms:item> > </xforms:select1> > </td> > </tr> > </xforms:repeat> > </tbody> > </table> > </xforms:group> > > <xforms:trigger> > <xforms:label>Add another search term</xforms:label> > <xforms:insert ev:event="DOMActivate" > context="." > nodeset="search/binop[last()]" > position="after" > origin="instance('new-binop')"/> > </xforms:trigger> > > </fieldset> > </xforms:repeat> > > <xforms:trigger> > <xforms:label>Add a search</xforms:label> > <xforms:insert ev:event="DOMActivate" > context="." nodeset="search" > origin="instance('new-search')"/> > </xforms:trigger> > <hr/> > <xforms:submit submission="go"> > <xforms:label>GO</xforms:label> > </xforms:submit> > </body> > </html> > > > As you can see I also added missing empty namespace declarations. > > Does it work for you now? > > Thanks! > > -Alain > > Le 27/03/2011 20:24, st...@sa... a écrit : >> I am new to XForms, so I am hesitant to cry 'bug!' right away, but I >> think there is an issue with nesting repeats and table rows. I've >> cut my source down to make it easier to see the structure and posted >> it at: >> >> http://oracc.museum.upenn.edu/xsltforms-repeat-sans-table.xml >> >> and >> >> http://oracc.museum.upenn.edu/xsltforms-repeat-with-table.xml >> >> In the first case, the repeat works correctly: the first binop in >> the instance is displayed (but without the label--another bug?) and >> clicking on the add-another-search-term button takes the repeat >> from the correct instance ('new-binop'). >> >> In the with-table case, the first binop is displayed (with label) >> but clicking on the add-another-search-term button repeats the >> first binop. >> >> Thanks, >> >> Steve >> >> >> >> ------------------------------------------------------------------------------ >> Enable your software for Intel(R) Active Management Technology to meet the >> growing manageability and security demands of your customers. Businesses >> are taking advantage of Intel(R) vPro (TM) technology - will your software >> be a part of the solution? Download the Intel(R) Manageability Checker >> today! http://p.sf.net/sfu/intel-dev2devmar >> _______________________________________________ >> Xsltforms-support mailing list >> Xsl...@li... >> https://lists.sourceforge.net/lists/listinfo/xsltforms-support >> > > |
|
From: COUTHURES A. <ala...@ag...> - 2011-03-31 14:25:38
|
Steve, XSLTForms still has problems with repeats within tables when there are some extra lines at the beginning or at the end. Using THEAD, TBODY and TFOOT should better work but, for your examples, I prefered using XPath predicates for having just a repeat element: xsltforms-repeat-sans-table.xml: <?xml-stylesheet href="xsltforms/xsltforms.xsl" type="text/xsl"?> <html xmlns="http://www.w3.org/1999/xhtml" xmlns:xforms="http://www.w3.org/2002/xforms" xmlns:ev="http://www.w3.org/2001/xml-events"> <head> <title>OASE Form</title> <link rel="stylesheet" type="text/css" href="/css/oase.css"/> <script type="text/javascript" src="/js/oase.js"> </script> <xforms:model> <xforms:instance id="search"> <xse xmlns=""> <project>sans-table</project> <search> <index>txt</index> <binop> <key/> <filter type="position" value="any"/> </binop> </search> <result count="0" list="oase"> <url>javascript:oasePager('etcsri','oase')</url> </result> </xse> </xforms:instance> <xforms:instance id="new-search"> <search xmlns="" type="include"> <index></index> <binop> <key/> <filter type="position" value="any"/> </binop> </search> </xforms:instance> <xforms:instance id="new-binop"> <binop xmlns="" invert="no" type="and"> <key/> <filter type="position" value="any"/> </binop> </xforms:instance> <xforms:submission action="xxx" method="post" id="go" mediatype="application/xml" replace="instance"> <xforms:action ev:event="xforms-submit-done"> <xforms:load> <xforms:resource value="instance('search')/result"/> </xforms:load> </xforms:action> </xforms:submission> </xforms:model> </head> <body> <h1> <xforms:output value="project"/> Search: <xforms:output value="result/@count"/> results so far </h1> <xforms:repeat nodeset="search" id="search-repeat"> <fieldset> <legend> <xforms:group ref=".[count(preceding-sibling::search)=0]"> Search index </xforms:group> <xforms:group ref=".[count(preceding-sibling::search)>0]"> <xforms:select1 ref="@type"> <xforms:item> <xforms:label>include</xforms:label> <xforms:value>and</xforms:value> </xforms:item> </xforms:select1> results of searching </xforms:group> <xforms:select1 ref="index"> <xforms:item> <xforms:label>transliterations</xforms:label> <xforms:value>txt</xforms:value> </xforms:item> </xforms:select1> </legend> <xforms:group ref=".[index[.='txt']]"> <xforms:repeat nodeset="binop" id="binop-repeat"> <xforms:output value="if(.[not(preceding-sibling::binop)]/key,'For ','')"/> <xforms:select1 ref=".[preceding-sibling::binop]/@type"> <xforms:item> <xforms:label>and</xforms:label> <xforms:value>and</xforms:value> </xforms:item> </xforms:select1> <xforms:input ref="key"/> <xforms:select1 ref="filter[@type='position']/@value"> <xforms:item> <xforms:label>Any position</xforms:label> <xforms:value>any</xforms:value> </xforms:item> </xforms:select1> </xforms:repeat> </xforms:group> <xforms:trigger> <xforms:label>Add another search term</xforms:label> <xforms:insert ev:event="DOMActivate" context="." nodeset="search/binop[last()]" position="after" origin="instance('new-binop')"/> </xforms:trigger> </fieldset> </xforms:repeat> <xforms:trigger> <xforms:label>Add a search</xforms:label> <xforms:insert ev:event="DOMActivate" context="." nodeset="search" origin="instance('new-search')"/> </xforms:trigger> <hr/> <xforms:submit submission="go"> <xforms:label>GO</xforms:label> </xforms:submit> </body> </html> xsltforms-repeat-with-table.xml: <?xml-stylesheet href="xsltforms/xsltforms.xsl" type="text/xsl"?> <html xmlns="http://www.w3.org/1999/xhtml" xmlns:xforms="http://www.w3.org/2002/xforms" xmlns:ev="http://www.w3.org/2001/xml-events"> <head> <title>OASE Form</title> <link rel="stylesheet" type="text/css" href="/css/oase.css"/> <script type="text/javascript" src="/js/oase.js"> </script> <xforms:model> <xforms:instance id="search"> <xse xmlns=""> <project>with-table</project> <search> <index>txt</index> <binop> <key/> <filter type="position" value="any"/> </binop> </search> <result count="0" list="oase"> <url>javascript:oasePager('etcsri','oase')</url> </result> </xse> </xforms:instance> <xforms:instance id="new-search"> <search type="include"> <index></index> <binop> <key/> <filter type="position" value="any"/> </binop> </search> </xforms:instance> <xforms:instance id="new-binop"> <binop invert="no" type="and"> <key/> <filter type="position" value="any"/> </binop> </xforms:instance> <xforms:submission action="xxx" method="post" id="go" mediatype="application/xml" replace="instance"> <xforms:action ev:event="xforms-submit-done"> <xforms:load> <xforms:resource value="instance('search')/result"/> </xforms:load> </xforms:action> </xforms:submission> </xforms:model> </head> <body> <h1> <xforms:output value="project"/> Search: <xforms:output value="result/@count"/> results so far </h1> <xforms:repeat nodeset="search" id="search-repeat"> <fieldset> <legend> <xforms:group ref=".[count(preceding-sibling::search)=0]"> Search index </xforms:group> <xforms:group ref=".[count(preceding-sibling::search)>0]"> <xforms:select1 ref="@type"> <xforms:item> <xforms:label>include</xforms:label> <xforms:value>and</xforms:value> </xforms:item> </xforms:select1> results of searching </xforms:group> <xforms:select1 ref="index"> <xforms:item> <xforms:label>transliterations</xforms:label> <xforms:value>txt</xforms:value> </xforms:item> </xforms:select1> </legend> <xforms:group ref=".[index[.='txt']]"> <table> <tbody> <xforms:repeat nodeset="binop" id="binop-repeat"> <tr> <td> <xforms:output value="if(.[not(preceding-sibling::binop)]/key,'For ','')"/> <xforms:select1 ref=".[preceding-sibling::binop]/@type"> <xforms:item> <xforms:label>and</xforms:label> <xforms:value>and</xforms:value> </xforms:item> </xforms:select1> <xforms:input ref="key"/> </td> <td> <xforms:select1 ref="filter[@type='position']/@value"> <xforms:item> <xforms:label>Any position</xforms:label> <xforms:value>any</xforms:value> </xforms:item> </xforms:select1> </td> </tr> </xforms:repeat> </tbody> </table> </xforms:group> <xforms:trigger> <xforms:label>Add another search term</xforms:label> <xforms:insert ev:event="DOMActivate" context="." nodeset="search/binop[last()]" position="after" origin="instance('new-binop')"/> </xforms:trigger> </fieldset> </xforms:repeat> <xforms:trigger> <xforms:label>Add a search</xforms:label> <xforms:insert ev:event="DOMActivate" context="." nodeset="search" origin="instance('new-search')"/> </xforms:trigger> <hr/> <xforms:submit submission="go"> <xforms:label>GO</xforms:label> </xforms:submit> </body> </html> As you can see I also added missing empty namespace declarations. Does it work for you now? Thanks! -Alain Le 27/03/2011 20:24, st...@sa... a écrit : > I am new to XForms, so I am hesitant to cry 'bug!' right away, but I > think there is an issue with nesting repeats and table rows. I've > cut my source down to make it easier to see the structure and posted > it at: > > http://oracc.museum.upenn.edu/xsltforms-repeat-sans-table.xml > > and > > http://oracc.museum.upenn.edu/xsltforms-repeat-with-table.xml > > In the first case, the repeat works correctly: the first binop in > the instance is displayed (but without the label--another bug?) and > clicking on the add-another-search-term button takes the repeat > from the correct instance ('new-binop'). > > In the with-table case, the first binop is displayed (with label) > but clicking on the add-another-search-term button repeats the > first binop. > > Thanks, > > Steve > > > > ------------------------------------------------------------------------------ > Enable your software for Intel(R) Active Management Technology to meet the > growing manageability and security demands of your customers. Businesses > are taking advantage of Intel(R) vPro (TM) technology - will your software > be a part of the solution? Download the Intel(R) Manageability Checker > today! http://p.sf.net/sfu/intel-dev2devmar > _______________________________________________ > Xsltforms-support mailing list > Xsl...@li... > https://lists.sourceforge.net/lists/listinfo/xsltforms-support > |
|
From: COUTHURES A. <ala...@ag...> - 2011-03-31 08:29:17
|
Chester, > I'm trying to learn xforms and have been going through some of the > examples in the wiki book. The simple submit example at > http://en.wikibooks.org/wiki/XForms/Submit that puts a file to the > current directory does not work on either Firefox or Safari. I'm using > the example verbatim (adding the xsltforms invocation at the top of > the file of course) and I've tried changing the form of the filename, > using action="file:./myData.xml", for example. I've also tried using a > file:///absolute_pathname and that makes it worse. Please try with just "file://". For security reasons, XSLTForms will always prompt the user for the folder and name of the file. Thanks! -Alain |
|
From: Chester W. <ch...@de...> - 2011-03-31 05:47:32
|
Hello, I'm trying to learn xforms and have been going through some of the examples in the wiki book. The simple submit example at http://en.wikibooks.org/wiki/XForms/Submit that puts a file to the current directory does not work on either Firefox or Safari. I'm using the example verbatim (adding the xsltforms invocation at the top of the file of course) and I've tried changing the form of the filename, using action="file:./myData.xml", for example. I've also tried using a file:///absolute_pathname and that makes it worse. This example works fine with the Firefox xforms extension. I've tried the beta3 release of xsltforms, also beta3RC, and the latest build, 496. Here's the debugging output from firefox (the output on Safari is slightly less informative) 0 -> Dispatching event xforms-submit on <SPAN class="xforms-submission" id="save"/> 0 -> Dispatching event xforms-submit-serialize on <SPAN class="xforms-submission" id="save"/> 1 -> Submit put - application/xml - myData.xml - true 0 -> Access to restricted URI denied ( Why would the current directory be restricted???) I also get a popup (from Firebug perhaps?) that says: XSLTForms Exception -------------------------- Error initializing : ([object Object],[object XMLHttpRequest])@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:2932 ([object Object],[object XMLHttpRequest],[object DOMException])@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:2969 ()@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:2916 ([object Event])@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:7407 ([object HTMLSpanElement],"xforms-submit")@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:7305 ([object HTMLSpanElement],[object Element],[object Event])@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:3300 ([object HTMLSpanElement],[object Element],[object Event])@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:3161 ([object HTMLSpanElement],[object Element],[object Event])@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:3146 (-2)@file:///Users/chet/src/xforms/reminv/build/xsltforms.js:1319 TypeError req.getAllResponseHeaders() is null Thanks for your help... Chester Wood |
|
From: Grégoire C. <gco...@gm...> - 2011-03-29 18:42:03
|
Hi Efraim!
Le 29/03/2011 18:29, Efraim Feinstein a écrit :
> Hi,
>
> On 03/29/2011 12:04 PM, Grégoire COLBERT wrote:
>> Hi!
>>
>> Is it possible to do a calculation just before the submission of an
>> instance? Can I use the "calculate" attribute of a xf:bind to do this?
>>
> Two ideas:
> 1. (Answer: yes, you can) Have the xf:input reference a separate
> instance than the one you send, use an xf:bind with @calculate,
> binding the one you actually send and calculating with the value from
> the xf:input. The value in the instance should then *always* be the
> hashed password - not just before you submit. I think this is the
> better solution.
Thanks! I just did that and it works fine! For the archives of the list,
the solution looks like:
<xf:bind
nodeset="instance('instance-compte-client-creation-requete')/hash-mot-de-passe"
calculate="digest(digest(instance('instance-compte-client-creation-mots-de-passe')/mot-de-passe-1,'SHA-1','hex'),'SHA-1','hex')"/>
I call twice the SHA-1 function in order to prevent the use of a
brute-force hash dictionary (supposedly no one has done a double SHA-1
dictionary yet!).
> 2. Capture the xforms-submit event in your submission and use
> xf:setvalue to set the hashed value. Then, the hash will only be
> present before the submission. You can capture xforms-submit-done and
> xforms-submit-error to clear the hashed copy.
>
Best regards,
Grégoire
|
|
From: Efraim F. <efr...@gm...> - 2011-03-29 17:32:45
|
Never mind. The bug is me. It requires the context() function to resolve the @value, otherwise it resolves relative to @ref. Sorry for the noise, -- --- Efraim Feinstein Lead Developer Open Siddur Project http://opensiddur.net http://wiki.jewishliturgy.org |
|
From: Efraim F. <efr...@gm...> - 2011-03-29 17:27:51
|
Hi, The attached code demonstrates a bug: xf:setvalue will always set the value of the reference to the empty string if the @value points to an attribute. It should take the string value of the attribute. I'm using the latest XSLTForms dataisland branch (r496). Thanks, -- --- Efraim Feinstein Lead Developer Open Siddur Project http://opensiddur.net http://wiki.jewishliturgy.org |
|
From: Efraim F. <efr...@gm...> - 2011-03-29 16:29:18
|
Hi, On 03/29/2011 12:04 PM, Grégoire COLBERT wrote: > Hi! > > Is it possible to do a calculation just before the submission of an > instance? Can I use the "calculate" attribute of a xf:bind to do this? > Two ideas: 1. (Answer: yes, you can) Have the xf:input reference a separate instance than the one you send, use an xf:bind with @calculate, binding the one you actually send and calculating with the value from the xf:input. The value in the instance should then *always* be the hashed password - not just before you submit. I think this is the better solution. 2. Capture the xforms-submit event in your submission and use xf:setvalue to set the hashed value. Then, the hash will only be present before the submission. You can capture xforms-submit-done and xforms-submit-error to clear the hashed copy. -- --- Efraim Feinstein Lead Developer Open Siddur Project http://opensiddur.net http://wiki.jewishliturgy.org |
|
From: Grégoire C. <gco...@gm...> - 2011-03-29 16:05:11
|
Hi! Is it possible to do a calculation just before the submission of an instance? Can I use the "calculate" attribute of a xf:bind to do this? The need is to hash the password given by the user, so that it doesn't travel as clear text. But obviously, we don't want the user to see the hashed password appear in the xf:input. Ideas welcome! :-) Cheers, Grégoire |
|
From: Claudius T. <cla...@ya...> - 2011-03-29 09:36:23
|
Hi, I have the pleasure to announce version 1.0.7 of exsltforms. exsltforms is an open source project comprising XForms extension actions / elements and widgets for XSLTForms. Change log: 1. This version of exsltforms works with the revision 494 of XSLTForms, as of 2011-03-27. 2. The project name was changed from eXSLTForms to exsltforms. Best regards, Claudius Teodorescu http://extxsltforms.sourceforge.net/sitKubera/index/index.xml |
|
From: COUTHURES A. <ala...@ag...> - 2011-03-29 07:17:58
|
Hello, Yes, transfered to the trunk! Thanks! -Alain Le 29/03/2011 08:48, Grégoire COLBERT a écrit : > Hi! > > I noticed that "xsltforms.js" in rev 496 still has "rev 490" at the top. > Is the dataisland branch forgotten in the updates? Or has it been > transfered to the "trunk"? > > Thanks! > > Grégoire > > ------------------------------------------------------------------------------ > Enable your software for Intel(R) Active Management Technology to meet the > growing manageability and security demands of your customers. Businesses > are taking advantage of Intel(R) vPro (TM) technology - will your software > be a part of the solution? Download the Intel(R) Manageability Checker > today! http://p.sf.net/sfu/intel-dev2devmar > _______________________________________________ > Xsltforms-support mailing list > Xsl...@li... > https://lists.sourceforge.net/lists/listinfo/xsltforms-support > |
|
From: Grégoire C. <gco...@gm...> - 2011-03-29 06:48:57
|
Hi! I noticed that "xsltforms.js" in rev 496 still has "rev 490" at the top. Is the dataisland branch forgotten in the updates? Or has it been transfered to the "trunk"? Thanks! Grégoire |
|
From: COUTHURES A. <ala...@ag...> - 2011-03-28 21:06:14
|
This issue is due to default values being considered for bind/@readonly and bind/@relevant in consecutive bindings in r494. r496 should fix this: it's OK with the test case and some variations of it. Thank you for your feedbacks! -Alain Le 27/03/2011 00:03, Leigh L. Klotz, Jr. a écrit : > bind/@readonly and bind/@relevant work if it is the only or second bind > on a node, but not if it is the first. > > > If the second bind assigns readonly, relevant, or type, then the first > bind (readonly or relevant) fails. > > > <?xml version="1.0"?> > <?xml-stylesheet type="text/xsl" href="/xsltforms/xsltforms.xsl"?> > <?css-conversion no?> > <html xmlns="http://www.w3.org/1999/xhtml" > xmlns:xf="http://www.w3.org/2002/xforms" > xmlns:ev="http://www.w3.org/2001/xml-events" > xmlns:xsd="http://www.w3.org/2001/XMLSchema"> > <head> > <title>bind example</title> > > <model xmlns="http://www.w3.org/2002/xforms"> > > <instance id="main"> > <data xmlns=""> > <title/> > </data> > </instance> > <!-- swap the order of these binds and readonly will work --> > <!-- drop the second bind and readonly will work --> > <!-- use relevant instead of readonly in the first bind and the same > problems occur --> > <bind nodeset="title" readonly="false()" /> > <bind nodeset="title" type="xsd:string" /> > </model> > </head> > <body> > <group xmlns="http://www.w3.org/2002/xforms"> > <input ref="instance('main')/title"> > <label>Title:</label> > </input> > </group> > </body> > </html> > |
|
From: <st...@sa...> - 2011-03-27 18:24:28
|
I am new to XForms, so I am hesitant to cry 'bug!' right away, but I think there is an issue with nesting repeats and table rows. I've cut my source down to make it easier to see the structure and posted it at: http://oracc.museum.upenn.edu/xsltforms-repeat-sans-table.xml and http://oracc.museum.upenn.edu/xsltforms-repeat-with-table.xml In the first case, the repeat works correctly: the first binop in the instance is displayed (but without the label--another bug?) and clicking on the add-another-search-term button takes the repeat from the correct instance ('new-binop'). In the with-table case, the first binop is displayed (with label) but clicking on the add-another-search-term button repeats the first binop. Thanks, Steve |
|
From: Leigh L. K. Jr. <Lei...@Xe...> - 2011-03-26 23:18:38
|
bind/@readonly and bind/@relevant work if it is the only or second bind on a node, but not if it is the first. If the second bind assigns readonly, relevant, or type, then the first bind (readonly or relevant) fails. <?xml version="1.0"?> <?xml-stylesheet type="text/xsl" href="/xsltforms/xsltforms.xsl"?> <?css-conversion no?> <html xmlns="http://www.w3.org/1999/xhtml" xmlns:xf="http://www.w3.org/2002/xforms" xmlns:ev="http://www.w3.org/2001/xml-events" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <head> <title>bind example</title> <model xmlns="http://www.w3.org/2002/xforms"> <instance id="main"> <data xmlns=""> <title/> </data> </instance> <!-- swap the order of these binds and readonly will work --> <!-- drop the second bind and readonly will work --> <!-- use relevant instead of readonly in the first bind and the same problems occur --> <bind nodeset="title" readonly="false()" /> <bind nodeset="title" type="xsd:string" /> </model> </head> <body> <group xmlns="http://www.w3.org/2002/xforms"> <input ref="instance('main')/title"> <label>Title: </label> </input> </group> </body> </html> |
97 messages has been excluded from this view by a project administrator.
