Re: Big comments

Elliotte Harold wrote:

> In Java, this char array can contain a theoretical maximum of 2.1 
> gigabytes of text, in practice probably somewhat less.
> 
> What is a parser to do if this limit is exceeded? The spec doesn't say 
> and it needs to. This is a real possibility in the not too distant 
> future, and perhaps today.

What should a SAX parser do if an element or attribute name, attribute 
value, or processing instruction data exceed Java's limits, or the element 
nesting depth uses up the stack space?

I think that this needs to be part of a general examination of XML security 
issues, both inside and outside of Java and SAX.


All the best,


David


-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
_______________________________________________
List: sax-devel, [email protected]
See:  http://www.saxproject.org/
https://lists.sourceforge.net/lists/listinfo/sax-devel