On 15 April 2013 14:07, Simon St.Laurent
<simonstl@simonstl.com> wrote:
...
All of the features Roger describes are commonly available in XML tool
chains. They can be locked out with minimalist processing approaches or
to some extent with the parser generator approach Roger asked about
earlier.
Perhaps a good example of the minimalistic approach to dealing with (alleged) security issues in XML is MicroXML. To quote the latest MicroXML (draft) spec [1]:
"... the features of XML that are most problematic from a security
perspective have been eliminated from MicroXML: most importantly, MicroXML
completely eliminates document type declarations, including entity declarations..."
