主题： xml

• XML today: well-formed versus valid, namespaces, and when it is still the right choice

  A well-formed XML document obeys the syntax; a valid one also satisfies a DTD or schema. Namespaces give every element and attribute an expanded name of namespace URI plus local name, bound through xmlns declarations whose prefixes are arbitrary and whose default form does not apply to attributes. XML remains the right choice for mixed-content documents and for ecosystems whose vocabularies and tooling are already XML.

  article · en · reviewed · 知识截至 2026-09-16

• XML external entities: disabling DTD processing in parsers

  An XML document can declare entities that expand to local files, internal URLs or gigabytes of text; a parser that honours them on untrusted input discloses files, performs server-side requests or exhausts memory. Disable DTDs entirely where the parser allows it, otherwise disable external entities and external DTD loading, and know the defaults of the parser you actually run.

  article · en · reviewed · 知识截至 2026-09-16

机器可读： JSON