XQuery spec doesn't warn about injection attacks

SQL injection attacks are a well-known risk. Surely there's an analog 
for XQuery.
Please warn about them.

http://www.w3.org/TR/xquery/#id-security-considerations

(I spent (another) 10 minutes trying to get my bugzilla account working 
and failed. Rather
than punt to the someday pile, I'm sending mail. Sorry.)

-- 
Dan Connolly, W3C http://www.w3.org/People/Connolly/

Received on Monday, 28 November 2005 21:54:15 UTC