W3C home > Mailing lists > Public > public-xml-core-wg@w3.org > May 2006

Re: Canonicalization xml:base processing

From: Konrad Lanz <Konrad.Lanz@iaik.tugraz.at>
Date: Thu, 18 May 2006 18:02:14 +0200
Message-ID: <446C9A86.5050700@iaik.tugraz.at>
To: John Cowan <cowan@ccil.org>
Cc: Richard Tobin <richard@inf.ed.ac.uk>, "Grosso, Paul" <pgrosso@ptc.com>, public-xml-core-wg@w3.org

John Cowan wrote:
> Konrad Lanz scripsit:
>   
>> [...] "dot and 
>> dot-dot canonicalization" allows to map more equivalent documents onto 
>> the same serialized output and helps to avoid false negatives in XMLDSig.
>>     
>
> Unfortunately doing so produces inaccurate results.  For example, suppose
> the outermost xml:base value is "foo/bar/" and the next inner one is
> "../../..".  Ordinary remove_dot_segments will reduce this to the null
> string, but this is incorrect.
>
> Leaving it as "foo/bar/../../.." produces the same result as in the
> original context when applied to an equivalent base URI.  It is only
> safe to remove dots when that base URI is fully available.
>   
pls. cf. to:

9. [...] if however there are no "<scheme>://<authority>/"> components, 
the result is a relative URI starting with a relative path. If 
processing continues implementations MUST handle this by retaining the 
leading ".." complete path segments in the resulting path (i.e., 
treating them as part of the final URI e.g. ../../<segment>/<segment> )*.

in the above case "../" would remain, which should be equivalent.

best regards
Konrad

-- 
Konrad Lanz, IAIK/SIC - Graz University of Technology
Inffeldgasse 16a, 8010 Graz, Austria
Tel: +43 316 873 5547
Fax: +43 316 873 5520
https://www.iaik.tugraz.at/aboutus/people/lanz
http://jce.iaik.tugraz.at

Certificate chain (including the EuroPKI root certificate):
https://europki.iaik.at/ca/europki-at/cert_download.htm




Received on Thursday, 18 May 2006 16:02:54 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:21:33 GMT