Home. 
Search
.

transparent
transparent
transparent
  Library.Mailing List Archive

Altova Mailing List Archives


Re: [xml-dev] New release (2.8) of XSV

From: Daniel Veillard <daniel@--------.--->
To: "Henry S. Thompson" <ht@---.--.--.-->
Date: 10/9/2004 4:40:00 PM
On Fri, Oct 08, 2004 at 05:30:50PM +0100, Henry S. Thompson wrote:
> The really good news is that this approach doesn't require XSV to punt
> in the face of large exponents, which it used to do (i.e. treated all
> numbers > 100 in min/maxOccurs as if they _were_ 100).  All other
> existing processors do something similar (that is, punt above some
> number), I believe.

libxml2 regexps used counters since day 1 for min/maxoccurs implementation.
The explosion didn't look a supportable alternative to me as it opens
the door to trivial DoS attacks or forces to break the schemas validation
which is also a big problem if you consider schemas as a contract between
two communicating parties.

Daniel

-- 
Daniel Veillard      | libxml Gnome XML XSLT toolkit  http://xmlsoft.org/
daniel@v...  | Rpmfind RPM search engine http://rpmfind.net/
http://veillard.com/ | 

From ht@i... Sun Oct 10 21:57:46 2004
Receive


transparent
Print
Mail
Like It
Disclaimer
.

These Archives are provided for informational purposes only and have been generated directly from the Altova mailing list archive system and are comprised of the lists set forth on www.altova.com/list/index.html. Therefore, Altova does not warrant or guarantee the accuracy, reliability, completeness, usefulness, non-infringement of intellectual property rights, or quality of any content on the Altova Mailing List Archive(s), regardless of who originates that content. You expressly understand and agree that you bear all risks associated with using or relying on that content. Altova will not be liable or responsible in any way for any content posted including, but not limited to, any errors or omissions in content, or for any losses or damage of any kind incurred as a result of the use of or reliance on any content. This disclaimer and limitation on liability is in addition to the disclaimers and limitations contained in the Website Terms of Use and elsewhere on the site.

.
.

transparent
transparent
 
Company | Legal | Press | Partners | Careers | Sitemap | Contact Us | Altova Blog | Mobile | Full Site
 
Use of this site is governed by our Terms & Conditions and Privacy Policy Copyright 2005-2012 Altova. All Rights Reserved.
transparentGSA