• From: Amelia A Lewis <amyzing@t...>
• To: Michael Ludwig <mlu@a...>
• Date: Mon, 24 Aug 2009 11:09:37 -0400

On Mon, 24 Aug 2009 11:07:34 +0200, Michael Ludwig wrote:
> Elliotte Rusty Harold schrieb:
>> It makes parsers much more complex, and arguably slower. It also
>> introduces some security issues that wouldn't otherwise be present.
> 
> Filesystem and network access? That would hold true for anything
> accessing the filesystem and the network.

Not so much.

> Precisely why the internal DTD subset should be such a problem,
> I don't understand. Because it cannot be ignored? Complexity,
> slowness and security should result from the external subset in
> the same way, shouldn't they?

Google "billion laughs".

Amy!

• Follow-Ups:
  • Re: Wikipedia on XML
    • From: Liam Quin <liam@w...>

• References:
  • Re: Wikipedia on XML
    • From: Elliotte Rusty Harold <elharo@i...>
  • RE: Wikipedia on XML
    • From: "Michael Kay" <mike@s...>
  • Re: Wikipedia on XML
    • From: Elliotte Rusty Harold <elharo@i...>
  • Re: Wikipedia on XML
    • From: Michael Ludwig <milu71@g...>
  • Re: Wikipedia on XML
    • From: Elliotte Rusty Harold <elharo@i...>
  • Re: Wikipedia on XML
    • From: Michael Ludwig <mlu@a...>