ndw’s Twitter Archive—№ 33,788

It's easy to forget that formal public identifiers are a convention. You can put any string you like in there. That makes the System.Xml.UriResolver public ID exploit a little more straightforward. Luckily it can only be used for XML documents, so /etc/passwd is safe. I think.