Re: [xml-dev] Malicious XML

[Richard Tobin <richard@cogsci.ed.ac.uk>]

>Any chance of some details of just what it is in the internal subset 
>which triggers this behaviour, and how?

You can easily construct a few entities that expand to a huge result.
Depending on how your parser returns things, this may use lots of
memory or merely use up lots of cpu time.  There is an example at

  http://www.cogsci.ed.ac.uk/~richard/billion-laughs.xml

I don't recommend loading this file into a browser.

-- Richard