From owner-freebsd-vuxml@FreeBSD.ORG Tue Aug 31 00:15:24 2004 Return-Path: Delivered-To: freebsd-vuxml@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CA59516A4CE for ; Tue, 31 Aug 2004 00:15:24 +0000 (GMT) Received: from gw.celabo.org (gw.celabo.org [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id 66E7A43D49 for ; Tue, 31 Aug 2004 00:15:24 +0000 (GMT) (envelope-from nectar@celabo.org) Received: from localhost (localhost [127.0.0.1]) by gw.celabo.org (Postfix) with ESMTP id D79985485D; Mon, 30 Aug 2004 19:15:23 -0500 (CDT) Received: from gw.celabo.org ([127.0.0.1]) by localhost (hellblazer.celabo.org [127.0.0.1]) (amavisd-new, port 10024) with SMTP id 07925-09; Mon, 30 Aug 2004 19:15:13 -0500 (CDT) Received: from [10.0.1.107] (lum.celabo.org [10.0.1.107]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client did not present a certificate) by gw.celabo.org (Postfix) with ESMTP id 436795487E; Mon, 30 Aug 2004 19:15:13 -0500 (CDT) In-Reply-To: <20040830133416.X35009@xeon.unixathome.org> References: <20040830133416.X35009@xeon.unixathome.org> Mime-Version: 1.0 (Apple Message framework v619) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Jacques Vidrine Date: Mon, 30 Aug 2004 19:15:02 -0500 To: Dan Langille X-Mailer: Apple Mail (2.619) X-Mailman-Approved-At: Tue, 31 Aug 2004 00:16:20 +0000 cc: freebsd-vuxml@freebsd.org Subject: vuln.xml *is* XML (was Re: vuln.xml is not XML) X-BeenThere: freebsd-vuxml@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Documenting security issues in VuXML List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Aug 2004 00:15:24 -0000 On Aug 30, 2004, at 12:39 PM, Dan Langille wrote: > I refer to my previous message regarding the difficulties in parsing > vuln.xml. I have since learned that any markup (e.g.

) should be > be in > a CDATA section. > > See http://www.w3.org/TR/REC-xml/ and look at section 2.7. > > CDATA sections begin with the string " string "]]>":] > > I propose that markup be enclosed with a CDATA section. No this is absolutely wrong :-) The XHTML is embedded with VuXML... the whole document is one XML document. Some elements are in the VuXML namespace, while others are in the XHTML namespace. Markup cannot exist in a CDATA section--- if it is in a CDATA section, it is *not* markup but *text content*. I saw your earlier message about XML::Node, but since I am not familiar with that (or XML::Parser), I did not understand what problem you were having. Could you try to describe it differently? Cheers, -- Jacques A Vidrine / NTT/Verio nectar@celabo.org / jvidrine@verio.net / nectar@freebsd.org