[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: well-formedness error
On Thu, 17 Jun 2004 00:06:28 -0700
Tim Bray <Tim.Bray@xxxxxxx> wrote:
> I generally find it hard to get upset about this, since *if* the body
> is XML, if the software cheerfully ignores the headers and points an
> XML parser at it, the encoding will get sorted out and everything will
> just work. However, smarter people than I have said that ignoring the
> Content-type is a potentially rich source of security holes. Hmm, I
> wonder if one could adopt a Best Practice along the lines of "respect
> the Content-type header unless it's text/xml which is obviously a sign
> of someone who was completely clueless about setting their Content-type
> header."
I do not agree with your wording, but I propose to use application/xml
or application/something+xml for Atom and disallow text/xml for it.
Cheers,
--
MURATA Makoto (FAMILY Given) <EB2M-MRT@xxxxxxxxxxxxxxx>