14. HTML injection

HTML can be injected using an XForms output widget:

<p id="schedlink">
  <xf:output mediatype="text/html"
             ref="instance('ui')/schedlink"/>
</p>

Or, using the transform() function (not standardized):

1<td rowspan="2" data-slot="Monday/10:00">
  <xf:output mediatype="text/html"
             value="transform(instance('program'),
                              'single-item.xsl',
5			      false,
			      'slot',
			      'Monday/10:00')"/>
</td>