[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

RE: The <any/> element: bane of security or savior of versioni

• From: "Michael Kay" <mike@s...>
• To: "'Costello, Roger L.'" <costello@m...>,<xml-dev@l...>
• Date: Fri, 19 Oct 2007 13:17:54 +0100

> From a security perspective the <any/> element represents a 
> high risk and should be avoided if possible. 

Why? This sounds as crazy as banning .xml attachments (or .zip attachments)
as a security risk. 

If you want to stop people communicating, then regulating the markup that's
used isn't going to achieve the aim.

If you want to stop recipients of information doing bad things, then control
the recipients.

Michael Kay
http://www.saxonica.com/

• References:
  • The <any/> element: bane of security or savior of versioning?
    • From: "Costello, Roger L." <costello@m...>