Thanks for the answer, unfortunately editing the xsd is not an option, since 
it's downloaded from the net and I don't control the document. Or could I 
somehow make a modified version of the xsd known to xxe?

The error message seems rather strong, if it can be otherwise safely ignored - 
it would be a nice feature if one could select a checkbox "don't show this 
again".

John

-----Ursprüngliche Nachricht-----
Von: Hussein Shafie [mailto:[email protected]]
Gesendet: Freitag, 21. September 2012 12:47
An: John Webber
Cc: [email protected]
Betreff: Re: [XXE] Problem with Liquibase main.xml xsd

On 09/21/2012 09:37 AM, John Webber wrote:
>
> I'm a new XML Mind user, I've updated to V 5.4.0.
>
> We use the database product Liquibase (http://www.liquibase.org);
> every time I open a Liquibase main.xml I get a validation error of the
> XSD (URL is http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-2.0.xsd).
>
> Here's the error message I get:
>
> *Document Type Error *
>
>     * http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-2.0.xsd:7:75:
>       cannot derive simpleType by restriction: "(\$\{[\w\.]+\})" invalid
>       value for pattern facet: illegal escape [st-props-correct.1]
>
> I've googled the problem without any results. Is there a workaround
> within XML Mind?
>

The only way to suppress this error message is to fix dbchangelog-2.0.xsd.

According to http://www.w3.org/TR/xmlschema-2/#regexs, there is no need to 
escape '$' by writing "\$". Therefore, using a text editor, please edit line 7. 
Replace:

<xsd:pattern value="\$\{[\w\.]+\}"/>

by:

<xsd:pattern value="$\{[\w\.]+\}"/>

(No '\' in front of '$'.)

After doing that, please restart XMLmind XML Editor.

Just in case, do not forget to clear the schema cache (this is done once for 
all) before opening your document conforming to dbchangelog-2.0.xsd.

In order to clear the schema cache:
[1] Use "Options|Preferences".
[2] Select "Advanced|Cached data".
[3] Click "Schema cache", "Clear".

See http://www.xmlmind.com/xmleditor/_distrib/doc/help/advancedOptions.html



---
PS: this XSD error is a very minor one. Like Xerces, the reference XSD 
validator, our validator could silently accept "\$" as being '$'.
However this is not case. Moreover, this is not really a bug which would need 
to be fixed.



DENT-iV GmbH
Luise-Ullrich-Str. 4
82031 Grünwald
Tel. +49 89 392980120
Amtsgericht München, HRB 159415
Geschäftsführer: Robert Krütten
 
--
XMLmind XML Editor Support List
[email protected]
http://www.xmlmind.com/mailman/listinfo/xmleditor-support

Reply via email to