Robert Moskowitz wrote:
> Why is xml editor changing:
> <!DOCTYPE rfc SYSTEM "rfc2629.dtd" [
>     <!ENTITY rfc2119 PUBLIC ''
>       'http://xml.resource.org/public/rfc/bibxml/reference.RFC.2119.xml'>
> ]>
> 
> to:
> 
> <!DOCTYPE rfc SYSTEM "rfc2629.dtd" [
> <!ENTITY rfc2119 SYSTEM 
> "http://xml.resource.org/public/rfc/bibxml/reference.RFC.2119.xml";>
> ]>

For XXE,

---
<!ENTITY rfc2119 PUBLIC ''
'http://xml.resource.org/public/rfc/bibxml/reference.RFC.2119.xml'>
---

is logically equivalent to:

---
<!ENTITY rfc2119 SYSTEM
"http://xml.resource.org/public/rfc/bibxml/reference.RFC.2119.xml";>
---

XXE is clearly not the XML editor of choice if the physical 
representation of XML is important for you. This is a design choice, not 
a bug we can fix.


Reply via email to