Re: [xml-dev] DTDs, W3C Schemas, RELAX NG, Schematron?

[Rich Salz <rsalz@datapower.com>]

> Not that the problem is with DTDs.  After all these years, it seems that 
> the jury has come back in and the cost-benefit ratio for entities just 
> ain't good.  -Tim

Good.  A big problem with external entities are the security 
implications: if I send you some XML, you have to be careful to make 
sure I don't trick you into opening something you didn't intend.  E.g., 
a networked XSLT script that outputs your password (or other private 
info) file.
	/r$