On Mon, May 5, 2008 at 8:55 PM, Hank Ratzesberger
<
hankr@...> wrote:
> Of course, it's not really a problem for your server-side
> code, and javascripted code is already vulnerable,
> so, yes, I suppose this might be a case where AVT
> would work, but I don't recall at what stage they
> are evaluated. So, perhaps yes, AVT for xform
> elements, evaluated when the element is processed.
Yes, exactly; in the case of the submission, the AVTs in the action
attribute will be evaluated when the submission runs.
Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
Orbeon's Blog:
http://www.orbeon.com/blog/Personal Blog:
http://avernet.blogspot.com/Twitter -
http://twitter.com/avernet--
You receive this message as a subscriber of the
ops-users@... mailing list.
To unsubscribe: mailto:
ops-users-unsubscribe@...
For general help: mailto:
sympa@...?subject=help
OW2 mailing lists service home page:
http://www.ow2.org/wws
