From owner-freebsd-vuxml@FreeBSD.ORG Tue Aug 31 00:23:21 2004 Return-Path: Delivered-To: freebsd-vuxml@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A6E2016A4CE for ; Tue, 31 Aug 2004 00:23:21 +0000 (GMT) Received: from black.imgsrc.co.jp (black.imgsrc.co.jp [210.226.20.147]) by mx1.FreeBSD.org (Postfix) with ESMTP id E8E7A43D3F for ; Tue, 31 Aug 2004 00:23:20 +0000 (GMT) (envelope-from kuriyama@imgsrc.co.jp) Received: from localhost (localhost [127.0.0.1]) by black.imgsrc.co.jp (Postfix) with ESMTP id C6F8150BD6 for ; Tue, 31 Aug 2004 09:23:19 +0900 (JST) Received: from black.imgsrc.co.jp (black.imgsrc.co.jp [IPv6:2001:218:422:2::9999]) by black.imgsrc.co.jp (Postfix) with ESMTP id 5510D50BC8 for ; Tue, 31 Aug 2004 09:23:18 +0900 (JST) Date: Tue, 31 Aug 2004 09:23:18 +0900 Message-ID: <7mk6vg2m15.wl@black.imgsrc.co.jp> From: Jun Kuriyama To: freebsd-vuxml@freebsd.org In-Reply-To: References: <20040830133416.X35009@xeon.unixathome.org> User-Agent: Wanderlust/2.10.1 (Watching The Wheels) SEMI/1.14.6 (Maruoka) FLIM/1.14.6 (Marutamachi) APEL/10.6 Emacs/21.3 (i386--freebsd) MULE/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII X-Virus-Scanned: by amavisd 0.1 Subject: Re: vuln.xml *is* XML (was Re: vuln.xml is not XML) X-BeenThere: freebsd-vuxml@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Documenting security issues in VuXML List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Aug 2004 00:23:21 -0000 At Mon, 30 Aug 2004 19:15:02 -0500, Jacques Vidrine wrote: > > I refer to my previous message regarding the difficulties in parsing > > vuln.xml. I have since learned that any markup (e.g.

) should be > > be in > > a CDATA section. > > > > See http://www.w3.org/TR/REC-xml/ and look at section 2.7. > > > > CDATA sections begin with the string " > string "]]>":] > > > > I propose that markup be enclosed with a CDATA section. > > No this is absolutely wrong :-) The XHTML is embedded with VuXML... > the whole document is one XML document. Some elements are in the VuXML > namespace, while others are in the XHTML namespace. Markup cannot > exist in a CDATA section--- if it is in a CDATA section, it is *not* > markup but *text content*. Both are correct. In good old XML world, we should use CDATA section to quote external markup. On the other hand, VuXML lives in XML + Namespace world (see related recommendations). > I saw your earlier message about XML::Node, but since I am not familiar > with that (or XML::Parser), I did not understand what problem you were > having. Could you try to describe it differently? I'm not sure XML::Parser can handle namespace correctly. If it cannot do such, parser will confuse when it reads markups with namespace. -- Jun Kuriyama // IMG SRC, Inc. // FreeBSD Project