Throwing another idea out there; since we're not *really* using namespaces anyways, could we just reject elements and attributes with colons in their names? (besides the xml: attributes, of course) IIRC XMPP entities aren't expected to understand namespace prefixes anyhow.
(I've never written a parser, so I was not aware of the difference between lexing and parsing. I'm more sympathetic to Dave Cridland's case now.)
pgpwDJzdX39D2.pgp
Description: PGP signature