I'd appreciate some input on this situation, I can't figure out the best way to do this.

I have some data that's being prepared for me in a ColdFusion app and in an IFrame within the CF app we want to display some graphs (not strictly an image, it's an entire page) being generated on the .NET side of things. I'd like to pass XML data from the CF side to .NET as well as the user.

On the .NET side I'm putting the data in a session so the user can sift through it without the need to have it re-queried and re-passed from CF.

What I've tried:

• Generating XML with CF, putting it in a hidden form field, auto-submitting (with JS) a the form to the .NET side.
  • The issue I'm having with this approach is the encoding being done on the form post. The data has entries like <entry data="hello &amp; goodbye">. It's an issue because it's being URL encdeded, Posted, and when I get it on the .NET side I get <entry data="hello & goodbye"> which isn't properly formed XML.

What I'd like to avoid:

• An intermediary DB approach (dropping the data in a DB on CF, picking it up with .NET) I'd like to only display what is passed to the page. I have security concerns with the data, it's very sensitive.
• Passing the data to a webservice, returning a GUID, forwarding the user with a URL Parameter to access the passed in data. I think that'd be risky if someone happened on a link to that data. I can't take that risk.

I was thinking of passing the data with JSON, but I'm very unfamiliar with it. Thoughts?

Thanks for your time folks.