Re: [xml-dev] Namespace prefixes are a security risk

Maybe I'm missing something ...

> And the prefix can be anything, e.g.,
> 
>     <attackNOW:book xmlns:attackNOW="http://www.book.org">

But this just seems to be a badly chosen prefix.

> Not so innocent-looking anymore, is it?

It looks a bit silly, just like the following in C or Java:

  int attackNOW = 0;

-- 
Michael Ludwig