Re: [xml-dev] New release (2.8) of XSV from Henry S. Thompson on 2004-10-10 (xmlschema-dev@w3.org from October 2004)

From: Henry S. Thompson <ht@inf.ed.ac.uk>
Date: Sun, 10 Oct 2004 22:57:32 +0100
To: daniel@veillard.com
Cc: Jeff Rafter <lists@jeffrafter.com>, xmlschema-dev@w3.org, xml-dev@lists.xml.org
Message-ID: <f5bsm8mkzhv.fsf@erasmus.inf.ed.ac.uk>

Daniel Veillard <daniel@veillard.com> writes:

> libxml2 regexps used counters since day 1 for min/maxoccurs implementation.
> The explosion didn't look a supportable alternative to me as it opens
> the door to trivial DoS attacks or forces to break the schemas validation
> which is also a big problem if you consider schemas as a contract between
> two communicating parties.

I would be very interested, as I'm sure would others, in a description
of your algorithm.

ht
-- 
 Henry S. Thompson, HCRC Language Technology Group, University of Edinburgh
                     Half-time member of W3C Team
    2 Buccleuch Place, Edinburgh EH8 9LW, SCOTLAND -- (44) 131 650-4440
            Fax: (44) 131 650-4587, e-mail: ht@inf.ed.ac.uk
                   URL: http://www.ltg.ed.ac.uk/~ht/
[mail really from me _always_ has this .sig -- mail without it is forged spam]

Received on Sunday, 10 October 2004 21:57:46 UTC