On 3 Sep 2013, at 18:08, Yongming Zhao wrote:
> another concern is the security of libXML2, I just greped the security focus
> list, it shows that at least 3 security update for 2013
It's a lot bigger and more complex than expat!
Plan A: make it a configuration option.
You could take a look a
3, 2013 10:20 AM Pacific Standard Time
To: dev@trafficserver.apache.org
Subject: Re: expat vs libxml2
On Sep 3, 2013, at 11:08 AM, Yongming Zhao wrote:
> another concern is the security of libXML2, I just greped the security focus
> list, it shows that at least 3 security update for 2013
&g
afaik, that libXML2 is vary heavy lib that may include many more dependency
issue there, for example in it will bind to icu library. the upgrading of
libxml2 always make me unhappy on Gentoo.
can we try to add the xml2 a configure option?
在 2013-9-3，下午11:12，Leif Hedstrom 写道：
> On Sep 3, 2013
On Sep 3, 2013, at 11:08 AM, Yongming Zhao wrote:
> another concern is the security of libXML2, I just greped the security focus
> list, it shows that at least 3 security update for 2013
>
> I don't know much on the XML indeed
Valid points. I guess I should clarify how I feel about this: If we
another concern is the security of libXML2, I just greped the security focus
list, it shows that at least 3 security update for 2013
I don't know much on the XML indeed
just FYI
thanks
在 2013-9-4，上午12:56，Leif Hedstrom 写道：
> On Sep 3, 2013, at 10:53 AM, Yongming Zhao wrote:
>
>> afaik, tha
On Sep 3, 2013, at 10:53 AM, Yongming Zhao wrote:
> afaik, that libXML2 is vary heavy lib that may include many more dependency
> issue there, for example in it will bind to icu library. the upgrading of
> libxml2 always make me unhappy on Gentoo.
>
> can we try to add the xml2 a configure opt
On Sep 3, 2013, at 6:03 AM, Nick Kew wrote:
> Igor recently pinged me on IRC to ask about switching
> trafficserver's expat use to libxml2. There's a rationale
> about libxml2 being a dependency for a range of plugins,
> so why not use a single XML parser for everything?
Seems reasonable to me.
Igor recently pinged me on IRC to ask about switching
trafficserver's expat use to libxml2. There's a rationale
about libxml2 being a dependency for a range of plugins,
so why not use a single XML parser for everything?
A quick grep reveals that expat is only used in two places
and that its use i
