[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

RE: The <any/> element: bane of security or savior ofversionin

  • From: Rick Jelliffe <rjelliffe@a...>
  • To: xml-dev@l...
  • Date: Sat, 20 Oct 2007 03:17:24 +1000

RE:  The <any/> element: bane of security or savior ofversionin
On Fri, 2007-10-19 at 17:08 +0100, Michael Kay wrote:
> > > When Any occurs in xml documents that are ran through process X the 
> > > system crashes.
> Well, clearly you should either fix the bug in the application or put a
> fence around it to protect it from data it can't handle. 

Doesn't this assume open source or system configurability?  

Or, to put it another way, when people don't have access to the source
or when they are required to use canned COTS installations out of their
control, almost any feature badly implemented can be labelled a risk. So
what people are identifying is not a risk of XML but a risk of some
applications they have seen. 

Rick Jelliffe 

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]


Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced!

Buy Stylus Studio Now

Download The World's Best XML IDE!

Accelerate XML development with our award-winning XML IDE - Download a free trial today!

Don't miss another message! Subscribe to this list today.
First Name
Last Name
Subscribe in XML format
RSS 2.0
Atom 0.3

Stylus Studio has published XML-DEV in RSS and ATOM formats, enabling users to easily subcribe to the list from their preferred news reader application.

Stylus Studio Sponsored Links are added links designed to provide related and additional information to the visitors of this website. they were not included by the author in the initial post. To view the content without the Sponsor Links please click here.

Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member
Stylus Studio® and DataDirect XQuery ™are products from DataDirect Technologies, is a registered trademark of Progress Software Corporation, in the U.S. and other countries. © 2004-2013 All Rights Reserved.