Client-side XSLT, Validation and Data Security
Wendell Piez · Balisage series on markup technologies · 2021
Client-side XSLT (Extensible Stylesheet Language Transformations) or CSX is often used in scenarios where data (in XML, Extensible Markup Language) from a remote server is provided to a user who processes it in some way, for example rendering it locally for display. That is, the server provides the data, and the client does the work on that data to make it useful. However, that is not the only scenario in which CSX is useful. In an environment in which the user already has, or is in the process of creating, XML, CSX can be a convenient and powerful tool, enabling users to perform operations on their data securely on their own systems. The potential for this use of CSX is illustrated with uses of SaxonJS for several security-related applications.