From owner-freebsd-vuxml@FreeBSD.ORG Tue Aug 31 01:30:31 2004 Return-Path: Delivered-To: freebsd-vuxml@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 20C6916A4CE for ; Tue, 31 Aug 2004 01:30:31 +0000 (GMT) Received: from gw.celabo.org (gw.celabo.org [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id E531943D31 for ; Tue, 31 Aug 2004 01:30:30 +0000 (GMT) (envelope-from nectar@FreeBSD.org) Received: from localhost (localhost [127.0.0.1]) by gw.celabo.org (Postfix) with ESMTP id 6A5315487E; Mon, 30 Aug 2004 20:30:30 -0500 (CDT) Received: from gw.celabo.org ([127.0.0.1]) by localhost (hellblazer.celabo.org [127.0.0.1]) (amavisd-new, port 10024) with SMTP id 09437-03; Mon, 30 Aug 2004 20:30:19 -0500 (CDT) Received: from [10.0.1.107] (lum.celabo.org [10.0.1.107]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client did not present a certificate) by gw.celabo.org (Postfix) with ESMTP id B10B35485D; Mon, 30 Aug 2004 20:30:19 -0500 (CDT) In-Reply-To: <20040830203241.V35009@xeon.unixathome.org> References: <20040830133416.X35009@xeon.unixathome.org> <7mk6vg2m15.wl@black.imgsrc.co.jp> <20040830203241.V35009@xeon.unixathome.org> Mime-Version: 1.0 (Apple Message framework v619) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <4C792F15-FAED-11D8-84D2-000A95BC6FAE@FreeBSD.org> Content-Transfer-Encoding: 7bit From: Jacques Vidrine Date: Mon, 30 Aug 2004 20:30:10 -0500 To: Dan Langille X-Mailer: Apple Mail (2.619) cc: freebsd-vuxml@freebsd.org Subject: Re: vuln.xml *is* XML (was Re: vuln.xml is not XML) X-BeenThere: freebsd-vuxml@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Documenting security issues in VuXML List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Aug 2004 01:30:31 -0000 On Aug 30, 2004, at 7:34 PM, Dan Langille wrote: > With CDATA, it works, With CDATA, it breaks: some markup is incorrectly treated as text content. > without, it fails and I have to treat every

, > and

as a node, not markup. without, it works perfectly. That is exactly how it is supposed to work, Dan :-) I guess I understand now what you are trying to accomplish. If you want to stuff processed XML (i.e. an XML nodeset) into a database, you must first convert the nodeset into a character stream in the usual fashion. Cheers, -- Jacques A Vidrine / NTT/Verio nectar@celabo.org / jvidrine@verio.net / nectar@freebsd.org