[
Lists Home |
Date Index |
Thread Index
]
> XML output is almost always more complex than you think at any given time.
> I'm sure that even having written a lot of XML output code, I haven't
> exhausted the realm of potential gotchas.
That's disappointing.
Developers should feel safe and comfortable generating XML with print
statements, knowing that only < and & are special. I'm sure (as your
article points out), it *can* be more complicated, but in most cases it
never needs be.
The problem with "just as an XML API" is that you usually have to build up
a DOM or Infoset or some such, and then call a serialization routine.
That's often ridiculously heavyweight for the task at hand.
/r$
--
Rich Salz Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
|
