[Home] [By Thread] [By Date] [Recent Entries]


Michael Leditschke wrote:
> 
>...
> 
> "This property allows the user to specify a list of schemas to use. If the
> targetNamespace of a schema (specified using this property) matches the
> targetNamespace of a schema occurring in the instance document in
> schemaLocation attribute, or if the targetNamespace matches the namespace
> attribute of <import> element, the schema specified by the user using this
> property will be used (i.e., the schemaLocation attribute in the instance
> document or on the <import> element will be effectively ignored)."
> 
> It would appear to be susceptible to the same attack as described above.

The ironic thing is that I always thought that DTD's susceptability to
this attack was a much more "real" argument against them than all of the
bogus "uses ugly syntax" and "doesn't have datatypes" BS that was so
popular three years ago. I felt schemas were important, in large part
because it was a chance to fix that bug!

 Paul Prescod

Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member