• To: xml-dev@l...
• Subject: Re: Malicious XML
• From: Richard Tobin <richard@c...>
• Date: Fri, 15 Nov 2002 15:01:59 GMT
• Cc:
• In-reply-to: <200211151018.18512.miles@m...>
• Organization: HCRC, University of Edinburgh

>Any chance of some details of just what it is in the internal subset 
>which triggers this behaviour, and how?

You can easily construct a few entities that expand to a huge result.
Depending on how your parser returns things, this may use lots of
memory or merely use up lots of cpu time.  There is an example at

  http://www.cogsci.ed.ac.uk/~richard/billion-laughs.xml

I don't recommend loading this file into a browser.

-- Richard

• Follow-Ups:
  • Re: Malicious XML
    • From: "Karl Waclawek" <karl@w...>

• References:
  • Re: Malicious XML
    • From: Miles Sabin <miles@m...>

• Prev by Date: Re: Malicious XML
• Next by Date: RE: dtds, schemas, xhtml, and multimedia technologies
• Previous by thread: Re: Malicious XML
• Next by thread: Re: Malicious XML
• Index(es):
  • Date
  • Thread