Re: [xml-dev] XInclude: security risk 1

[David Megginson <david@megginson.com>]

Simon St.Laurent writes:

 > It reminds me a bit of the issues that David Megginson raised back at XTech 
 > 2000:
 > http://www.xml.com/pub/a/2000/02/xtech/megginson.html
 > 
 > I can't find David's original slides, but it more or less covered the risks 
 > created by wide-open URI processing in a variety of different
 > contexts.

The slides are still here, but be warned that they're not
self-explanatory:

  http://www.megginson.com/ugly/


All the best,


David

-- 
David Megginson, david@megginson.com, http://www.megginson.com/