Opened 10 years ago
Closed 8 years ago
#491 closed defect (fixed)
Undefined type of RelationType creates a hole that can contain any XML
Reported by: | mwindhouwer | Owned by: | Dieter Van Uytvanck |
---|---|---|---|
Priority: | major | Milestone: | CMDI 1.2 |
Component: | ComponentSchema | Version: | |
Keywords: | Cc: |
Description
RelationType? in the CMD header is defined as follows:
<xs:element maxOccurs="1" minOccurs="1" name="RelationType"/>
As there is no explicit type some XSD rules kick in:
"An <element> with no referenced or included type definition will correspond to an element declaration which has the same type definition as the head of its substitution group if it identifies one, otherwise the ·ur-type definition·."
In this case the ur-type definition is taken, which basically allows any content, so unintentionally
<hello>world</hello>
becomes possible, while only a string value was intended.
Change History (2)
comment:1 Changed 10 years ago by
Owner: | changed from dietuyt to Dieter Van Uytvanck |
---|---|
Status: | new → assigned |
comment:2 Changed 8 years ago by
Resolution: | → fixed |
---|---|
Status: | assigned → closed |
Note: See
TracTickets for help on using
tickets.
Fixed, see cmd-envelop.xsd