Re: [xml-dev] XML processor attacks

[David Carlisle <davidc@nag.co.uk>]

> Is that posible?

No, (that is, the processor is supposed to check for loops, of course
it's possible that it exercises a bug in the system)

http://www.w3.org/TR/REC-xml/#norecursion

  Well-formedness constraint: No Recursion

 A parsed entity MUST NOT contain a recursive reference to itself, either
  directly or indirectly.

David