Re: [xml-dev] XML processor attacks

From
David Carlisle <>
To
Date
2007-02-01T10:36:26Z
ID
<>
Thread
Re: [xml-dev] XML processor attacks
> Is that posible?

No, (that is, the processor is supposed to check for loops, of course
it's possible that it exercises a bug in the system)

http://www.w3.org/TR/REC-xml/#norecursion

  Well-formedness constraint: No Recursion

 A parsed entity MUST NOT contain a recursive reference to itself, either
  directly or indirectly.

David