Hi,
 
I'm writing a server-side application which allows users to upload XML files via HTTP, then parses them and stores the data in a database. I'm using the property http://apache.org/xml/properties/schema/external-schemalocation to validate their file against a specific version of my schema file to prevent users from specifying their own modified version, and my SAX ContentHandler only recognises elements defined in my schema.
 
Is there a way to prevent the SAX validation from recognising namespaces apart from the one defined in my own schema and http://www.w3.org/2001/XMLSchema-instance , as I presume this would create additional network traffic and slow the system down, especially if the validator is trying to validate against a schema/DTD stored on a server with a slow connection. It would, I guess, be a way for people to attack the system if they put their minds to it!
 
Many thanks,
Andy


--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to