It seems core/cocoon-core/src/main/resources/org/apache/cocoon/cocoon.roles is not valid according to the DTD that is declared in the header. This gives an error when trying to run cocoon webapp:
No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.9.4/860 - Release Date: 21/6/2007 17:53
