----- Original Message -----
From: "Elliotte Rusty Harold" <>
To: "Mike Champion" <>; <>
Sent: Friday, February 21, 2003 8:58 AM
> The sin is in forbidding the document type declaration. If they
> choose not to load any external entities, then that's blessed by XML.
> However, this does not give them freedom to reject documents that
> contain such things, or to drop out lexical features of XML such as
> default attribute values and internal entities declared in the
> internal DTD subset.
There is one reason that is valid, IMO, and that is to prevent
"a million laughs" attacks.
Karl
