I've punted the issue over to the libxml folks, see this mailing list post: http://mail.gnome.org/archives/xml/2008-February/msg00062.html
Feel free to reply with clarifications. Hopefully, we can get some insight into this issue. -- Edward Z. Yang GnuPG: 0x869C48DA HTML Purifier <http://htmlpurifier.org> Anti-XSS Filter [[ 3FA8 E9A9 7385 B691 A6FC B3CB A933 BE7D 869C 48DA ]]