Fw: [xml-dev] Results of trying to load a 137MB XML document into IE, Fi

[Hermann Stamm-Wilbrandt <STAMMW@de.ibm.com>]

I forgot to mention the results of opening
http://stamm-wilbrandt.de/en/xsl-list/laughs.128.xml
in different browsers.


Firefox does not run into problems and generates this message:
XML Parsing Error: recursive entity reference
Location: http://stamm-wilbrandt.de/en/xsl-list/laughs.128.xml
Line Number 131, Column 14:<root>&ha128;</root>
-------------^


Opera 10 and Internet Explorer 8 start consuming memory and do not stop
until killed.


Chrome and Safari browsers even stop with below message for the minimal
sample:
http://stamm-wilbrandt.de/en/xsl-list/laughs.5.xml

This page contains the following errors:

error on line 8 at column 12: Detected an entity reference loop
Below is a rendering of the page up to the first error.



Mit besten Gruessen / Best wishes,

Hermann Stamm-Wilbrandt
Developer, XML Compiler, L3
Fixpack team lead
WebSphere DataPower SOA Appliances
----------------------------------------------------------------------
IBM Deutschland Research & Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschaeftsfuehrung: Dirk Wittkopp
Sitz der Gesellschaft: Boeblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294
----- Forwarded by Hermann Stamm-Wilbrandt/Germany/IBM on 12/31/2010 08:29
PM -----

From:       Hermann Stamm-Wilbrandt/Germany/IBM@IBMDE
To:         "Costello, Roger L." <costello@mitre.org>
Cc:         xml-dev@lists.xml.org
Date:       12/31/2010 08:04 PM
Subject:    Re: [xml-dev] Results of trying to load a 137MB XML document
            into IE, Firefox, and Opera



Roger,

the input document size is not that important, see here:
http://en.wikipedia.org/wiki/Billion_laughs

That file is of size 3928 bytes and will kill everything -- if no XML
threat protection is in place:
http://stamm-wilbrandt.de/en/xsl-list/laughs.128.xml

This file is a harmless version:
http://stamm-wilbrandt.de/en/xsl-list/laughs.5.xml

$ cat laughs.5.xml
<!DOCTYPE root [
<!ENTITY ha "Ha! ">
<!ENTITY ha2 "&ha;&ha;">
<!ENTITY ha3 "&ha2;&ha2;">
<!ENTITY ha4 "&ha3;&ha3;">
<!ENTITY ha5 "&ha4;&ha4;">
]>
<root>&ha5;</root>
$
$ xsltproc identity.xsl laughs.5.xml
<?xml version="1.0"?>
<root>Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha! Ha!
</root>
$


Mit besten Gruessen / Best wishes,

Hermann Stamm-Wilbrandt
Developer, XML Compiler, L3
Fixpack team lead
WebSphere DataPower SOA Appliances
----------------------------------------------------------------------
IBM Deutschland Research & Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschaeftsfuehrung: Dirk Wittkopp
Sitz der Gesellschaft: Boeblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294



From:       "Costello, Roger L." <costello@mitre.org>
To:         "xml-dev@lists.xml.org" <xml-dev@lists.xml.org>
Date:       12/31/2010 02:12 PM
Subject:    [xml-dev] Results of trying to load a 137MB XML document into
            IE, Firefox, and Opera



Hi Folks,

Here are the results of trying to load a 137MB XML document [1] into
various browsers:

1. Internet Explorer: it loaded and displayed the first part of the XML
document and then stopped and displayed this error message:

    Not enough storage is available to complete this operation.


2. Firefox: it worked on the XML document for a while and then the browser
window suddenly closed and a crash report box appeared.


3. Opera: it worked on the XML document for a while and then its screen
went blank and at the top of the browser window it said: (Unresponsive). I
had to manually kill the browser.


The good news is that the XML document loaded successfully into Oxygen XML.

/Roger

[1] The XML document contains data about all the Unicode characters. Unzip
this file to obtain the XML document:
http://www.unicode.org/Public/6.0.0/ucdxml/ucd.all.flat.zip

_______________________________________________________________________

XML-DEV is a publicly archived, unmoderated list hosted by OASIS
to support XML implementation and development. To minimize
spam in the archives, you must subscribe before posting.

[Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
Or unsubscribe: xml-dev-unsubscribe@lists.xml.org
subscribe: xml-dev-subscribe@lists.xml.org
List archive: http://lists.xml.org/archives/xml-dev/
List Guidelines: http://www.oasis-open.org/maillists/guidelines.php




_______________________________________________________________________

XML-DEV is a publicly archived, unmoderated list hosted by OASIS
to support XML implementation and development. To minimize
spam in the archives, you must subscribe before posting.

[Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
Or unsubscribe: xml-dev-unsubscribe@lists.xml.org
subscribe: xml-dev-subscribe@lists.xml.org
List archive: http://lists.xml.org/archives/xml-dev/
List Guidelines: http://www.oasis-open.org/maillists/guidelines.php