XOM API for Processing XML with Java

["Michael Kay" <mike AT saxonica.com>]

> That's a claim with some adhoc reasoning behind it, but not 
> anywhere near a proof. Indeed, I'd be surprised if a credible 
> proof emerged.
  
<snip/>

> Look, I'm not avdocating scare mongering, but I'd like to 
> point out that approaching security with a mindset that tries 
> to establish absolute certainty, proof, and the like, is at 
> best a fragile fantasy and at worst a source of (costly) 
> later security problems.

OK. So ad-hoc reasoning will have to do. Ad-hoc reasoning tells me that
there is no difference between CDATA sections and ordinary text nodes.

Security loses credibility if it stops us doing useful things, unless it can
come up with a clear explanation of why. When sending stuff to some of my
customers, I have to rename the .zip file as .zap to get it past security.
That's security making a complete fool of itself. This one seems very
similar.

Michael Kay
http://www.saxonica.com/