OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help



   Re: [xml-dev] DTDs, W3C Schemas, RELAX NG, Schematron?

[ Lists Home | Date Index | Thread Index ]

> Not that the problem is with DTDs.  After all these years, it seems that 
> the jury has come back in and the cost-benefit ratio for entities just 
> ain't good.  -Tim

Good.  A big problem with external entities are the security 
implications: if I send you some XML, you have to be careful to make 
sure I don't trick you into opening something you didn't intend.  E.g., 
a networked XSLT script that outputs your password (or other private 
info) file.


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS