Hi,

on our way to develop a medical guideline language we started with some XSDs
in XML Spy.

 

Fixing the "base" attribute issue in the referenced document while
validating the structure, we included the 

 

<xs:import namespace="http://www.w3.org/2001/XInclude";
schemaLocation="http://www.w3.org/2001/XInclude.xsd"/>

<xs:import namespace="http://www.w3.org/XML/1998/namespace"; 

 

into the schema (according to XML Mind Documentaition) and allowed the
"base"-attribute in the referenced element.  Now, in XML Spy anything works
fine.

 

XXE asks for the complete 

 

<xs:import namespace=http://www.w3.org/XML/1998/namespace
schemaLocation=".." /> tag within the schema.

 

<xs:import namespace="http://www.w3.org/XML/1998/namespace";
schemaLocation="http://www.w3.org/XML/1998/namespace.xsd"/> 

 

now generates an validation error within the sequence, that contains the
xinc:include

 

<xs:import namespace="http://www.w3.org/XML/1998/namespace";
schemaLocation="http://www.w3.org/2001/xml.xsd"/> 

 

does the same.

 

Surely I have problems understanding the dependencies between the schema
versions and the specials needs of XXE.

 

Thanks a lot

 

Stefan  

 

__ Dienst __________________________________

Prof. Dr. med. Stefan Klatt MPH
Public Health / FB Elektrotechnik - Informatik
Fachhochschule Stralsund
Zur Schwedenschanze 15
18435 Stralsund

Fon: +49 (0) 3831 45 69 66
Fax: +49 (0) 3831 45 71 1966
Mail:  <mailto:[email protected]> [email protected] 

 

 
--
XMLmind XML Editor Support List
[email protected]
http://www.xmlmind.com/mailman/listinfo/xmleditor-support

Reply via email to