OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help



   RE: [xml-dev] Internal entities removed from XML?

[ Lists Home | Date Index | Thread Index ]
  • To: <xml-dev@lists.xml.org>
  • Subject: RE: [xml-dev] Internal entities removed from XML?
  • From: "Doug Ransom" <Doug.Ransom@pwrm.com>
  • Date: Thu, 19 Dec 2002 11:02:39 -0800
  • Thread-index: AcKnZxZE/dFpu+DBSUysDpw3nnGpVQAAG8K1AAmirSA=
  • Thread-topic: [xml-dev] Internal entities removed from XML?

I sincerely apologize for bringing this to the attention of the xml-dev list.  I thought the behavior of not supporting and expanding internal entity references with the "default" ways to load and read XML documents with XMLDocument, XSLTransform, and XMLTextReader was by design.  

If I had thought there be a defect in the .net framework I would have submitted a defect report to Microsoft. 

There has been a fair bit of buzz lately about not having entity references in SOAP, so I had presumed Microsoft was encouraging the world to adopt an entityless existances.  I do find entity references quite useful in the maintainability of XSLT programs and would like to be able to use them in SOAP messages (although I think that is not to be given the  WS-I profile, which precludes SOAP messages with DOCTYPES).  

I am not even convinced that the best default behavior is to load any XML 1.0 document (although I lean that way) because of reports of attacks on software components based antagonistic entity reference declarations.  I am not familliar with these types of attacks myself.  We don't want programs to blow up by default either.

Doug Ransom

> -----Original Message-----
> From: Dare Obasanjo [mailto:dareo@microsoft.com]
> Sent: Thursday, December 19, 2002 6:17 AM
> To: Mike Champion; xml-dev@lists.xml.org
> Cc: edd@usefulinc.com
> Subject: RE: [xml-dev] Internal entities removed from XML?
> Mike, 
>   We have a bug which caused the behavior Doug Ransom saw. 
> Please do not treat a bug in one of our implementations of an 
> XML parser as indicative of any imagined Microsoft position 
> towards the W3C XML 1.0 recommendation. 


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS