On 08/04/2011 09:26 PM, Benoit Maisonny wrote:
>
> <[email protected]> wrote:
>
>     However, you cannot use this feature unless:
>
>     [1] Your DTD has an ANY element which can be used to host x elements.
>     More generally the main schema must have elements which can be used
>     to host elements coming from the secondary schemas.
>
>
>
> ANY normally wouldn't work because it allows any element that is defined
> in the DTD itself, not foreign elements. If my "a" DTD was an XML
> Schema, then I'd use xs:any indeed. But I tried anyway, and it seems XXE
> accepts foreign elements even though the DTD should not (in essence, as
> if ANY worked with foreign elements).

Yes, that's right. Please remember that XXE does not really support 
DTDs. They are converted on the fly to XML schemas.

However, I don't remember if XXE treats ANY as xs:any by default, or if 
it's a side-effect of the <validate> configuration element.



>
> One thing, though: I am not actually interested in validating my "x"
> elements. I just don't want XXE to complain about x being there. I wish
> one could do, as in NVDL:
> <validate namespace="http://www.w3.org/1998/Math/MathML";>
> <allow/>
> </validate>
>
> That's the equivalent of <xs:any processContents="skip"/>.

Sorry but we do not plan to support NVDL, nor the feature you describe.



 
--
XMLmind XML Editor Support List
[email protected]
http://www.xmlmind.com/mailman/listinfo/xmleditor-support

Reply via email to