RE: [office-comment] ODF security hazard? (ODF all versions)

["Alex Brown" <alexb@griffinbrown.co.uk>]

Rob hi

> But I do think this would be good to collect a set of security 
> considerations into an Appendix, as we have with Bidi techniques and 
> Accessibility guidelines.  If there is interest we could also explore 
> a "Secure ODF" profile that would forbid things like OLE embeddings, 
> scripts, etc.

That sounds like a sensible approach.

Since the DTD feature is not needed though, it is one attack vector
which could be easily blocked by forbidding DTDs ...

- Alex.