Re: [xml-dev] DTDs, W3C Schemas, RELAX NG, Schematron?
> Not that the problem is with DTDs. After all these years, it seems that > the jury has come back in and the cost-benefit ratio for entities just > ain't good. -Tim Good. A big problem with external entities are the security implications: if I send you some XML, you have to be careful to make sure I don't trick you into opening something you didn't intend. E.g., a networked XSLT script that outputs your password (or other private info) file. /r$