[sc34wg3] <mergeMap/> and security

[Lars Heuer]

Hi Jirka,

> Lars Heuer wrote:

>> IMO a user expects that a particular file is self-contained. But with
>> the mergeMap element inside the XTM syntax, a XTM document may not be
>> self-contained.

> But this is wrong expectation anyway. Even without mergeMap you can use
> XML facilities like external entities or XInclude in XTM file to include
> external pieces of TM. So I don't think that this is an argument against
> mergeMap.

The difference: XInclude and external entities are not part of the XTM
standard. How they are interpreted are beyond of the XTM standard.
The mergeMap element will be part of the XTM standard and we have to
take care about it.

Best regards,
Lars
-- 
http://semagia.com