[jira] [Commented] (XERCESC-1701) Xerces-C++ Allows junk after root element (null characters)

    [ https://issues.apache.org/jira/browse/XERCESC-1701?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17602022#comment-17602022 ] 

Benjamin Fritz commented on XERCESC-1701:
-----------------------------------------

Still a problem in 3.2.3, and indeed the problem is not limited to null characters. Other control characters are also allowed in the end of the file, including U+000b "LINE TABULATION", or ^K character. Attaching basic_bad_bytes3.xml as a sample. Also see XERCESC-2240 (possibly related).

> Xerces-C++ Allows junk after root element (null characters)
> -----------------------------------------------------------
>
>                 Key: XERCESC-1701
>                 URL: https://issues.apache.org/jira/browse/XERCESC-1701
>             Project: Xerces-C++
>          Issue Type: Bug
>          Components: Non-Validating Parser
>    Affects Versions: 3.0.1
>         Environment: WindowsXP
>            Reporter: Maarten Koskamp
>            Priority: Major
>         Attachments: sample.xml, version.incl
>
>
> Xerces-C allows a sequence of null characters after the document root at the end of the xml instance.
> XML Specifiction states that only white-space is allowed after the document root. 
> See attached sample for details.
> Info about the affected version of the parser is also added as an attachment to this issue.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)