Re:XMPP: Swiss Army Knife for the Internet of Things
by legulere on Friday August 05, 2016 @09:00AM
(#12231920)
It does a good job for markup, but really sucks for data serialisation. You have to come up with a schema, when you can translate your data structures 1:1 into a schema for e.g. json or protocol buffers.
With some formats like SVG you even need to parse the document into a DOM and work on it to get things right.
Lots of "features" that actually make things just harder to get right. Like XML entities can lead to a billion laughs [1] or sensitive files being included [2]. XML 1.0 files can contain null bytes, 1.1 files can't.
With some formats like SVG you even need to parse the document into a DOM and work on it to get things right.
Lots of "features" that actually make things just harder to get right. Like XML entities can lead to a billion laughs [1] or sensitive files being included [2]. XML 1.0 files can contain null bytes, 1.1 files can't.
[1]: https://en.wikipedia.org/wiki/Billion_laughs [2]: https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Pr...