Is this site a preview, mockup or spoof? - How you can know

The real site domain ends in nist.gov The page address shows https://

OSCAL Styler

An XSLT 1.0 workbench set up for OSCAL, the Open Security Controls Assessment Language.

If you wish to try styling OSCAL with CSS and have no interest in XSLT, the OSCAL Painter might be of interest.

Load your OSCAL XML below along with XSLT 1.0 and CSS code. Activate and the loaded data will be transformed using the XSLT and rendered on the page using the CSS. Load your own XSLT to test it, or load a ready-made basic XSLT and enhance and modify it in the page, applying it to see the results dynamically. No data is sent to any server.

The OSCAL Styler is inspired by M. Honnen's pioneering XSLT Fiddle (client-side version), which supports advanced XSLT up to XSLT 3.0/3.1 via the SaxonJS library. See also the spare but impressive XSLT Fiddle by Github user i-like-robots.

Feedback on this demonstration is welcome on the public Github Issues board. Or contribute to community discussions in public OSCAL channels.

Load OSCAL XML
Load and edit styles

XSLT 1.0

CSS

Who is this for

More information on XSLT 1.0 may be found on the Project Wiki.

XSLT developers seeking to learn OSCAL should start with its XML distribution.

This viewer application is maintained on Github, with documentation.

Is this site a demonstration, a service or both?

This application is provided by NIST as an educational demonstration of how a service can be created, not as a fully operational service.

No guarantees or warranties are provided by NIST that the demo service will be maintained, updated, upgraded, or always available. While NIST intends to keep the demonstration running (with project source code available), NIST also reserves the right to stop supporting it, or to remove or rework it, without any prior warning.

The best way to ensure access to the application over the long term is to replicate it. See the project wiki page on Maintenance and Support for more details on how these projects are designed to be standards-based, accessible, portable, adaptable over time and unhindered by practical impediments to wide deployment, either technical or legal.