From owner-freebsd-vuxml@FreeBSD.ORG Tue Aug 31 00:34:19 2004 Return-Path: Delivered-To: freebsd-vuxml@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 27B6816A4CE for ; Tue, 31 Aug 2004 00:34:19 +0000 (GMT) Received: from bast.unixathome.org (bast.unixathome.org [66.11.174.150]) by mx1.FreeBSD.org (Postfix) with ESMTP id E8E6E43D53 for ; Tue, 31 Aug 2004 00:34:18 +0000 (GMT) (envelope-from dan@langille.org) Received: from xeon (xeon.unixathome.org [192.168.0.18]) by bast.unixathome.org (Postfix) with ESMTP id C23AE3D40; Mon, 30 Aug 2004 20:34:17 -0400 (EDT) Date: Mon, 30 Aug 2004 20:34:17 -0400 (EDT) From: Dan Langille X-X-Sender: dan@xeon.unixathome.org To: Jun Kuriyama In-Reply-To: <7mk6vg2m15.wl@black.imgsrc.co.jp> Message-ID: <20040830203241.V35009@xeon.unixathome.org> References: <20040830133416.X35009@xeon.unixathome.org> <7mk6vg2m15.wl@black.imgsrc.co.jp> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-vuxml@freebsd.org Subject: Re: vuln.xml *is* XML (was Re: vuln.xml is not XML) X-BeenThere: freebsd-vuxml@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Documenting security issues in VuXML List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Aug 2004 00:34:19 -0000 On Tue, 31 Aug 2004, Jun Kuriyama wrote: > At Mon, 30 Aug 2004 19:15:02 -0500, > Jacques Vidrine wrote: > > > I refer to my previous message regarding the difficulties in parsing > > > vuln.xml. I have since learned that any markup (e.g.

) should be > > > be in > > > a CDATA section. > > > > > > See http://www.w3.org/TR/REC-xml/ and look at section 2.7. > > > > > > CDATA sections begin with the string " > > string "]]>":] > > > > > > I propose that markup be enclosed with a CDATA section. > > > > No this is absolutely wrong :-) The XHTML is embedded with VuXML... > > the whole document is one XML document. Some elements are in the VuXML > > namespace, while others are in the XHTML namespace. Markup cannot > > exist in a CDATA section--- if it is in a CDATA section, it is *not* > > markup but *text content*. > > Both are correct. In good old XML world, we should use CDATA section > to quote external markup. On the other hand, VuXML lives in XML + > Namespace world (see related recommendations). > > > I saw your earlier message about XML::Node, but since I am not familiar > > with that (or XML::Parser), I did not understand what problem you were > > having. Could you try to describe it differently? > > I'm not sure XML::Parser can handle namespace correctly. If it cannot > do such, parser will confuse when it reads markups with namespace. With CDATA, it works, without, it fails and I have to treat every

, and

as a node, not markup. -- Dan Langille - http://www.langille.org/