[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: XInclude: security risk 1

• To: xml-dev@l...
• Subject: Re: XInclude: security risk 1
• From: David Megginson <david@m...>
• Date: Sat, 26 Oct 2002 14:11:49 -0400
• In-reply-to: <4.2.0.58.20021026135751.00a5a2e0@p...>
• References: <p04330100b9e080b82819@[192.168.254.4]><4.2.0.58.20021026135751.00a5a2e0@p...>

Simon St.Laurent writes:

 > It reminds me a bit of the issues that David Megginson raised back at XTech 
 > 2000:
 > http://www.xml.com/pub/a/2000/02/xtech/megginson.html
 > 
 > I can't find David's original slides, but it more or less covered the risks 
 > created by wide-open URI processing in a variety of different
 > contexts.

The slides are still here, but be warned that they're not
self-explanatory:

  http://www.megginson.com/ugly/


All the best,


David

-- 
David Megginson, david@m..., http://www.megginson.com/

• References:
  • XInclude: security risk 1
    • From: Elliotte Rusty Harold <elharo@m...>
  • Re: XInclude: security risk 1
    • From: "Simon St.Laurent" <simonstl@s...>

• Prev by Date: Re: XInclude: security risk 1
• Next by Date: Re: XInclude: security risk 1
• Previous by thread: Re: XInclude: security risk 1
• Next by thread: Re: XInclude: security risk 1
• Index(es):
  • Date
  • Thread