Opened 10 years ago

Closed 8 years ago

#491 closed defect (fixed)

Undefined type of RelationType creates a hole that can contain any XML

Reported by: mwindhouwer Owned by: Dieter Van Uytvanck
Priority: major Milestone: CMDI 1.2
Component: ComponentSchema Version:
Keywords: Cc:

Description

RelationType? in the CMD header is defined as follows:

<xs:element maxOccurs="1" minOccurs="1" name="RelationType"/>

As there is no explicit type some XSD rules kick in:

"An <element> with no referenced or included type definition will correspond to an element declaration which has the same type definition as the head of its substitution group if it identifies one, otherwise the ·ur-type definition·."

In this case the ur-type definition is taken, which basically allows any content, so unintentionally

<RelationType?>

<hello>world</hello>

</RelationType?>

becomes possible, while only a string value was intended.

Change History (2)

comment:1 Changed 10 years ago by Dieter Van Uytvanck

Owner: changed from dietuyt to Dieter Van Uytvanck
Status: newassigned

comment:2 Changed 8 years ago by Twan Goosen

Resolution: fixed
Status: assignedclosed

Fixed, see cmd-envelop.xsd

Note: See TracTickets for help on using tickets.