[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message] RE: schemaLocation & Parser support?
> The last sentence of the above paragraph indicates to me that > xsi:schemaLocation is an optional feature that parsers can choose to > implement or not. Correct. Although I do not know of any parser supporting XML Schema not supporting this. > This seems to go against the grain of the design > philosophy of XML: "The number of optional features in XML is to > be kept to > the absolute minimum, ideally zero." I know that they are two separate > specifications, but by relegating xsi:schemaLocation to be an optional > feature, the specification breeds parser inconsistency, which > surely can not > be a good thing. If you have a server application that processes XML documents, are you really going to trust the author of the document to provide you the schema you validate that instance against? For instance, you accept purchase orders that conform to a vocabulary sprcified by OAG or CommerceOne or what have you. Your application can handle any XML document that validates against these schemas. If schemaLocation were not optional, Joe Hacker could send you an instance that claims to be from one of these vocabularies and tells you you can get the schema off of some web site in the former Soviet Union. This schema could be anything and the instance will be valid against it, but bad things happen to your application. What is the purpose of validating against a schema if you have no control over where that schema came from? All the XML Schema compliant parsers I am aware of will use schemaLocation unless you (the application) override it. This is how it should be. In my XML world, xsi:schemaLocation is a security risk and I will not use a parser that doesn't allow me to disable it. Section 2.4 Schema Structures defines 3 conformance levels for schema processors. A fully conforming processor must use schemaLocation unless directed otherwise. Otherwise it can't be called fully conforming. David Cleary
|
PURCHASE STYLUS STUDIO ONLINE TODAY!Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced! Download The World's Best XML IDE!Accelerate XML development with our award-winning XML IDE - Download a free trial today! Subscribe in XML format
|