Oxygen XML Forum

Id like to utilize a CGI script to access a remote XSL. The reason being is to protect the XSL from being opened/copied/saved. I figure that using a CGI script, the Oxygen user will have no idea where the XSL is located, and thus the user wont be able to directly access the file.

Thus far I give users access to a dummy XSL file that simply imports the secret XSL stylesheet; but its not protected, because the secret XSL must have read access in order for the import to work; but at least I'm able to mask it (a little).

I've been reading about the CGI::XMLApplication, and thought it may be possible to utilize it.

Please help, all your comments are useful.

Thank you

Hi,

You could for example store the XSLT on an HTTP server with certain authorization requirements.
But if the user would have the authorization details he could still open the XSLT from that URL.

The Saxon 9 processor also allows you to compile an XSLT stylesheet:

http://saxon.sourceforge.net/saxon7.9/u ... #Compiling

but you do not have built-in facilities from inside Oxygen to apply a compiled stylesheet over an XML document.
So probably using our plugins SDK:

http://blog.oxygenxml.com/2013/11/the-o ... ugins.html

you would need to create a plugin which would add a toolbar button which would call directly Saxon Java API to create a transformer and transform using the compiled stylesheet.

Recently one of our clients who is an accomplished XML guru and trainer launched a tool for producing XSL-FO which also includes digital XSLT signatures:

http://www.xmlpdf.com/ibex-downloads-signed.html

but I'm not sure about the details, maybe you could contact him directly.

Regards,
Radu

Hi,

You can see right here the contents of an obfuscated stylesheet:

http://www.cranesoftwrights.com/resourc ... scated.xsl

So you could try to contact Ken Holman and find out more details about how he does that:

http://www.cranesoftwrights.com/contact.htm

Regards,
Radu