Eric van der Vlist wrote: > On Thu, 2004-05-27 at 18:02, Hussein Shafie wrote: > > >>Fixed no, because there is no bug here: XXE is simply not smart enough >>to detect this case. > > > Or, tu put it differently, W3C XML Schema is so overly complex that it > makes it very tough to detect this case :-( ...
We are often upset enough about W3C XML Schemas to seriously start thinking about supporting and promoting the use of Relax NG in XXE. ;-)
