[erlang-questions] xmerl/xpath alternatives?

Adam Rutkowski hq@REDACTED
Tue Apr 2 21:34:16 CEST 2013


Hi List,

I need to provide a configurable set of validation rules for arbitrary 
user-generated XML documents. XPath would be just fine.

i.e. {"/foo/bar[1]/baz", 'in', [1,2,3], 'accept'}

But there's a catch - xmerl produces atoms so malicious user could take my VM down 
without trying too hard.

I'm thinking of two ugly hacks as I need to ship soon:

1) Bootstrapping a separate Erlang VM with heart enabled only 
   for the sake of dealing with XPath predicates.
2) Forking the simple parser found here [1] and making it compatible with jsonpath [2],
   as I'm already using the latter for arbitrary JSON documents, which I need to handle as well.

Solutions above are far from being right... Suggestions appreciated. 

[1] https://github.com/maxlapshin/parsexml
[2] https://github.com/GeneStevens/jsonpath

--
Adam












More information about the erlang-questions mailing list