
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
856
|
Chapter 15: XML
XmlSecureResolver or pass null as the XmlResolver-typed argument. The XmlUrlResolver
will resolve URLs to external resources, such as schema files, using the FILE, HTTP,
and HTTPS protocols. The
XmlSecureResolver restricts the resources that you can
access by requiring you to pass in evidence, which helps prevent cross-domain redi-
rection in XML. If you are accepting XML from the Internet, it could easily have a
redirection to a site where malicious XML would be waiting to be downloaded and
executed if you were not using the
XmlSecureResolver. If you pass null for the
XmlResolver, you are saying you do not want to resolve any external resources.
Microsoft has declared the
null option to be obsolete, and it shouldn’t be used any-
way since you should always use some type of
XmlResolver.
XSLT is a very powerful technology that allows you to transform XML into just
about any format you can think of, but it can be frustrating at times. The simple
need of a carriage return/line feed combination in the XSLT output was such a trial
that we were able to find more than 20 different message board requests for help on
how to do this! After looking at the W3C spec for XSLT, we found you could do this
using the
xsl:text element like this:
<xsl:text> 
</xsl:text>
The