Cart
|
[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message] Re: Embedding image files in XML using data URLs
 > An xs:anyURI value can be a data URL. that's hardly surprising given that (in later interpretations of xsd) any string is valid xs:anyURI value. > An xs:anyURI value can either link to external data or it can inline the data using a data URL. or said differently an xsl:anyURI value can refer to a resource by its URI
> A data URL in an XML instance document
exposes the recipient of the XML to the risks described above. Namely,
link filters can be circumvented and undesirable data can be smuggled in
without notice. shrug, I don't think those risks are particularly the result of anyURI. If you interpret any XML you get from anywhere it's up to you to ensure that that interpretation is safe. If it was encoded as a string <base64image>wAARCADqATkDASIA....</base64image> then there are no URI involved but you still have to decide whether or not it is safe to decode the base64.and do something with the result. David 
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] |
PURCHASE STYLUS STUDIO ONLINE TODAY!Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced! 
Download The World's Best XML IDE!Accelerate XML development with our award-winning XML IDE - Download a free trial today! Subscribe in XML format
|
|||||||||
