• From: David Carlisle <davidc@n...>
• To: costello@m...
• Date: Fri, 19 Oct 2007 15:42:51 +0100

 
< From a security perspective the <any/> element represents a high risk
> and should be avoided if possible.  In environments where schema
> validation is used in a guarding capacity, a schema that uses the
> <any/> element is likely to be marked as high risk or even forbidden
> from use.

That seems a rather bizare characterisation, and compared to otehr
features of XSD (for example lax or skip validation) what is teh problem
that you see with <any/> ?

David

________________________________________________________________________
The Numerical Algorithms Group Ltd is a company registered in England
and Wales with company number 1249803. The registered office is:
Wilkinson House, Jordan Hill Road, Oxford OX2 8DR, United Kingdom.

This e-mail has been scanned for all viruses by Star. The service is
powered by MessageLabs. 
________________________________________________________________________

• Follow-Ups:
  • Re: The <any/> element: bane of security or savior of versioning?
    • From: "bryan rasmussen" <rasmussen.bryan@g...>

• References:
  • The <any/> element: bane of security or savior of versioning?
    • From: "Costello, Roger L." <costello@m...>