Re: avoiding XML code in viewsource

[Joel Rees <rees@server.mediafusion.co.jp>]

Mr. Venugopal Siripuram:

The surest way to avoid showing your XML source code is to convert it to
HTML (or XHMTL?) before your browser gets it.

There may be a setting somewhere in the browser to switch between showing
source before conversion and showing it after.

When I started a project a couple of months ago, using only XSLT, IE would
always show me the XML source. Even after I started using DOM (calling
Microsoft's library from Delphi) to pre-filter the output, I think I recall
using IE's view source to look at the program output. Sometime later, I went
to view source in IE and got the converted HTML source, instead. I don't
know why, although I am sure I will eventually find out. (Maybe someone on
the list knows?) Fortunately, I was able to use a different path to do the
debugging.

Anyway, if you need security, I would suggest that you should not rely on
some (non-standard?) XSLT switch to turn off the show-source function. Use
DOM or something else to at least filter out the sensitive stuff before you
hand it off to the browser.

(Other opinions?)

Joel Rees

============================XML as Best Solution===
Joel Rees                          リース　ジョエル
Media Fusion Co.,Ltd.  株式会社メディアフュージョン
Amagasaki  TEL 81-6-6415-2560    FAX 81-6-6415-2556
    Tokyo　TEL 81-3-3516-2566  　FAX 81-3-3516-2567
                       http://www.mediafusion.co.jp
---------------------------------------------------
                                         Programmer
===================================================

----- Original Message -----
From: "Venugopal Siripuram" <svenu@wilco-int.com>
To: <xml-dev@lists.xml.org>
Sent: Wednesday, May 16, 2001 5:08 PM
Subject: avoiding XML code in viewsource


>
> hi all..
> For some security reason i don`t want my XML code  to appear in
viewsource.
> How can i do that?
>
>             Regards
> Venugopal Siripuram
>
>
> ------------------------------------------------------------------
> The xml-dev list is sponsored by XML.org, an initiative of OASIS
> <http://www.oasis-open.org>
>
> The list archives are at http://lists.xml.org/archives/xml-dev/
>
> To unsubscribe from this elist send a message with the single word
> "unsubscribe" in the body to: xml-dev-request@lists.xml.org
>