> I am looking for a way to enable users to make template to control the > presentation of reports that they would require. I am looking for the > most flexible to them and most secure to me way to do this. I want to > be careful since the data serve would come from my domain and thus be > vulnerable to origin-domain tricks. I can't have users write django > templates as they could put infinite loops or other nastinesses in > them.
We use docbook format for report templates and transform it in HTML during generating reports. You can do the same - your users will write/ modify docbook or similar XML-based templates, and you will transform it using your XSLT schemes. Of course, you should expand basic XML tags for ability to use some variables, cycles and so on. This is not easy way, but reliable enough. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-users?hl=en -~----------~----~----~----~------~----~------~--~---