Davy Toch wrote:
>> What you suggest certainly makes sense. The problem is that currently,
>> for XXE, <xi:include> elements (like managed references to external
>> entities and namespace prefixes) only exist at document load time and at
>> document save time.
> 
> But XXE only seems to have a problem with XIncludes that have
> parse="text" as attribute. Normal XIncludes that select XML fragments
> from other
> DocBook documents are not replaced by the actual XML fragments when
> modifying and saving the document.
> 

A text fragment included from an external document is almost always
merged into an *existing* Text node. Moreover a Text node is a
lightweight object carrying very few information.

In a nutshell, the implementation of XXE does not allow to treat text
fragments on par with elements.

Reply via email to