[Home] [By Thread] [By Date] [Recent Entries]



----- Original Message ----- 
From: "Elliotte Rusty Harold" <elharo@m...>
To: "Mike Champion" <mc@x...>; <xml-dev@l...>
Sent: Friday, February 21, 2003 8:58 AM


> The sin is in forbidding the document type declaration. If they 
> choose not to load any external entities, then that's blessed by XML. 
> However, this does not give them freedom to reject documents that 
> contain such things, or to drop out lexical features of XML such as 
> default attribute values and internal entities declared in the 
> internal DTD subset.

There is one reason that is valid, IMO, and that is to prevent
"a million laughs" attacks.

Karl


Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member