Re: [syndication] syndic8.com OCS feed fails parse.

[burton@relativity.yi.org]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

"Jeff Barr" <jeff@vertexdev.com> writes:

> Hi,
> 
> Indeed there is a problem. Do I need to insert some kind of XML declaration or
> PI at the top of the generated document? I'm not sure how to fix this, but I
> will as soon as I know...

Where are you getting your <description> data from?

You should validate the data on input so that user's can't break your XML.

If someone enters <blah> but doesn't complete it you will have problems.

Somehow, someone is entering descriptions with external entities.  In order to
fix it you will have to either escape the entities or disallow them.

Basically anything like &amp; or &asdf; will break.

Kevin

- -- 
Kevin A. Burton ( burton@apache.org, burton@openprivacy.org, burtonator@acm.org )
        Cell: 415-595-9965 URL: http://relativity.yi.org ICQ: 73488596 

The 9000 series is the most reliable computer ever made.  No 9000 computer has
ever made a mistake or distorted information.  We are all, by any practical
definition of the words, fool proof and incapable of error.
  - Hal
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: Get my public key at: http://relativity.yi.org/pgpkey.txt

iD8DBQE7tVrGAwM6xb2dfE0RAtIpAJ4jkqnc+gNmqfTERjgizAUGUmwf1wCgxvzk
MNE4wEWpVTDqoVmKhgWulKk=
=YXJI
-----END PGP SIGNATURE-----