> No, there's nothing inherently insecure about XML.  These flaws aren't in XML 
> itself, they're in some of the code libraries that developers use to process 
> XML.


The most important issue is that MS has to stop selling Word with XML
and pay money.  In effect, Word has been orphaned unless MS can switch
to something besides XML quickly.

That being said, Microsoft has had to issue fixes for XML in the
relatively recent past, consider:

http://www.microsoft.com/technet/security/bulletin/ms08-069.mspx

I can also recall MS having to issue fixes for XML Zero Day flaws.  It
appears that as soon as one flaw is fixed, others crop up with XML usage.


*************************************************************************
**  List info, subscription management, list rules, archives, privacy  **
**  policy, calmness, a member map, and more at http://www.cguys.org/  **
*************************************************************************

Reply via email to