Re: [xml-dev] XML processor attacks

• From: David Carlisle <davidc@...>
• To: oscar.vives@...
• Date: Thu, 1 Feb 2007 10:36:26 GMT

> Is that posible?

No, (that is, the processor is supposed to check for loops, of course
it's possible that it exercises a bug in the system)

http://www.w3.org/TR/REC-xml/#norecursion

  Well-formedness constraint: No Recursion

 A parsed entity MUST NOT contain a recursive reference to itself, either
  directly or indirectly.

David