[Home] [By Thread] [By Date] [Recent Entries]
----- Original Message ----- From: "Elliotte Rusty Harold" <elharo@m...> To: "Mike Champion" <mc@x...>; <xml-dev@l...> Sent: Friday, February 21, 2003 8:58 AM > The sin is in forbidding the document type declaration. If they > choose not to load any external entities, then that's blessed by XML. > However, this does not give them freedom to reject documents that > contain such things, or to drop out lexical features of XML such as > default attribute values and internal entities declared in the > internal DTD subset. There is one reason that is valid, IMO, and that is to prevent "a million laughs" attacks. Karl
|

Cart



