[
Lists Home |
Date Index |
Thread Index
]
Michael Leditschke wrote:
>
>...
>
> "This property allows the user to specify a list of schemas to use. If the
> targetNamespace of a schema (specified using this property) matches the
> targetNamespace of a schema occurring in the instance document in
> schemaLocation attribute, or if the targetNamespace matches the namespace
> attribute of <import> element, the schema specified by the user using this
> property will be used (i.e., the schemaLocation attribute in the instance
> document or on the <import> element will be effectively ignored)."
>
> It would appear to be susceptible to the same attack as described above.
The ironic thing is that I always thought that DTD's susceptability to
this attack was a much more "real" argument against them than all of the
bogus "uses ugly syntax" and "doesn't have datatypes" BS that was so
popular three years ago. I felt schemas were important, in large part
because it was a chance to fix that bug!
Paul Prescod
|
