Newswire items
Editors' Newswire for 30 October, 2002
23:59, 30 Oct 2002 UTC | XMLhack Editors

A collected summary of items that ran on the xmlhack newswire on 30 October, 2002.

XML Core Working Group on Character Entities
from Micah Dubinko at 21:51, 30 Oct
A "consensus statement" from the W3C XML Core Working Group on the need for character entities, as well as the means to declare them.

BugTraq XXE security advisory
from Simon St.Laurent at 14:01, 30 Oct
BugTraq reports that an XML eXternal Entity (XXE) attack is possible on applications which parse "XML input from untrusted sources using incorrectly configured XML parser. The application may be coerced to open arbitrary files and/or TCP connections."

WS-I "Basic Profile Working Draft"
This document defines the WS-I Basic Profile, consisting of a set of non-proprietary Web services specifications, along with clarifications to those specifications which promote interoperability.

xmlhack: developer news from the XML community

Front page | Search | Find XML jobs

Related categories
Newswire items