On 4/15/13 10:44 AM, Costello, Roger L. wrote:
> If you create a language (using XML or JSON or CSV or ...) that is
> recursively enumerable, then determining the vulnerabilities of that
> language is tantamount to trying to solve the halting problem. No
> amount of programming effort or QA will reveal all vulnerabilities -
> the language is provably insecure and cannot be secured. Hence their
> admonition:
>
>> Science to engineers: some problems are not solvable, do not set
>> yourself up to solve them.
So what then was the purpose of your initial post? An XML-specific list
of practices we should abandon on way to doing nothing?
--
Simon St.Laurent
http://simonstl.com/