274775 - Expat accepts invalid namespaces

Status: RESOLVED FIXED

(Core :: XML, defect, P3)

Description

[Peter Van der Beken [:peterv]]

There are a two prefixes (xml and xmlns) that have a fixed namespace URI
(http://www.w3.org/XML/1998/namespace and http://www.w3.org/2000/xmlns/). These
prefixes may not be bound to a different namespace URI and no other prefixes may
be bound to those namespace URIs. Expat currently doesn't flag that as an error.
See http://www.w3.org/TR/2004/REC-xml-names11-20040204/#xmlReserved and
http://sourceforge.net/tracker/index.php?func=detail&aid=695407&group_id=10127&atid=110127

Comment 1

[Peter Van der Beken [:peterv]]

Attachment: Testcase 1

Comment 2

[Peter Van der Beken [:peterv]]

Attachment: Testcase 2

Comment 3

[Peter Van der Beken [:peterv]]

Attachment: Testcase 3

Comment 4

[Peter Van der Beken [:peterv]]

Attachment: Testcase 4

Comment 5

[Peter Van der Beken [:peterv]]

Attachment: Testcase 5

Comment 6

[Peter Van der Beken [:peterv]]

My patch for Expat just got applied to the Expat trunk
(http://cvs.sourceforge.net/viewcvs.py/expat/expat/lib/xmlparse.c?r1=1.141&r2=1.143).
I backported it to our version of Expat.

Comment 7

[Peter Van der Beken [:peterv]]

Attachment: v1

Comment 8

[Johnny Stenback (:jst)]

Comment on attachment 169554 [details] [diff] [review]
v1

r+sr=jst