OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]
Re: [xml-dev] Namespace prefixes are a security risk

> I welcome your comments.

as others have said, there is no reason to single out out namespace
prefixes. Information can be encoded in the use of white space, or the
choice of " or ' around attribute values for example. Also the posted
code has a real chance of breaking the docuement as it doesn't consider
qnames in content. If for example you applied that to a xslt stylesheet
to normalise the prefixes used, then all xpaths within the stylesheet
would break unless you changed them to match which isn't really possible
without access to an xpath parser at run time.


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]

News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 1993-2007 XML.org. This site is hosted by OASIS