Re: Is MathML really Dangerous?

------=_NextPart_000_007B_01D12EDA.6764C2E0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi Bruce,

I have the feeling to give a reasonable answer to the question "is ASCII
dangerous":
https://xkcd.com/327
At least in the context of SQL injections it has been well studied.
If you expose MathML to browsers that might not even know what MathML is,
they might freak out.

Moritz


------=_NextPart_000_007B_01D12EDA.6764C2E0
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
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------=_NextPart_000_007B_01D12EDA.6764C2E0--