W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > October to December 2002

Re: Exclusive C14N Error: Using #default in NMTOKENS

From: Joseph Reagle <reagle@w3.org>
Date: Wed, 4 Dec 2002 15:53:57 -0500
To: "John Boyer" <JBoyer@PureEdge.com>, <w3c-ietf-xmldsig@w3.org>
Message-Id: <200212041553.57642.reagle@w3.org>

On Wednesday 04 December 2002 12:57 pm, John Boyer wrote:
> The PrefixList is defined to be of type NMTOKENS, but the # character is
> not allowed according to the XML rule for NmToken.

Yep, it's a problem. I remember the "#default" went missing, we put it back 
in at the end and I suppose I never validated it an example at that time. 
I'm led to that conclusion because I can't find a separate DTD/schema since 
neither would be useful in-and-of themselves. However, that goof can also 
be of use to use now in that I think we can address this with an errata... 
We don't have to worry about fixing a "frozen" DTD and schema at specified 
URIs that folks are already using.

(We were simply borrowing XSLT '#default' and Schema '##other' conventions 
but on investigation their XML types are CDATA and Schema types are 

> This can be fixed in one of two ways:
> 1) Change from NMTOKENS to CDATA

CDATA in the DTD description; and xs:strings in the schema.

> 2) Change from # to :
> The latter approach is reasonable because namespace prefixes do not
> contain a colon.  This would allow us to keep the NMTOKENS content model.

This approach also *invalidates* existing instances, which I don't want to 
do. I think it is *much* more likely that there are instances using the 
syntax than relying upon a schema definition somewhere -- as I stated, we 
didn't even provide one on-line ourselves for this spec since it's so 
small/trivial and needs to be incorporated elsewhere.

I'd propose the following erratum:

  E02 2002-10-03 (Error)
          In section 4 Use in XML Security, the data type of the
          PrefixList attribute value is specified as NMTOKENS in both the
          DTD and Schema. This does not permit the occurrence of the
          '#default' token in the attribute value. Consequently, the type
          of this attribute value should be CDATA in a DTD and/or
          xsd:string in a XML Schema.
Received on Wednesday, 4 December 2002 15:55:03 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 21:21:38 UTC