XHTML 1.1 validation accepts additional content

quote
NOTE: Whenever possible, give the address of the document you were checking.
/quote

This screenshot is the best I can offer:
http://img174.imageshack.us/img174/9042/dtdinjectha4.png

In my simple example, the user clicks on a link that validates a 
purposefully crafted page and displays (with light font on a reddish 
background) "IMPORTANT THE W3C SITE HAS DETERMINED THAT YOUR COMPUTER IS 
INFECTED VISIT INFECTIONKILLER.COM TO FIX IT RIGHT AWAY"

This is easily accomplished by modifying the DTD to include that text 
and closing an img tag improperly (for example).

I am not a member of the mailing list, and vigorous searches did not 
reveal any related topics that I could locate. Apologies if this has 
already been posted.

Received on Monday, 3 September 2007 16:34:48 UTC