On Mon, 24 Aug 2009 11:07:34 +0200, Michael Ludwig wrote:
> Elliotte Rusty Harold schrieb:
>> It makes parsers much more complex, and arguably slower. It also
>> introduces some security issues that wouldn't otherwise be present.
>
> Filesystem and network access? That would hold true for anything
> accessing the filesystem and the network.
Not so much.
> Precisely why the internal DTD subset should be such a problem,
> I don't understand. Because it cannot be ignored? Complexity,
> slowness and security should result from the external subset in
> the same way, shouldn't they?
Google "billion laughs".
Amy!
