Validation of an XML document against an Xml Schema guarantees that the structure and content of the xml conforms to the types defined in the schema. Does this mean that we automatically elevate the trust level of a document that has passed schema validation? Can we use schema validation as a security layer to our application? The general recommendation is that validation of an xml document should not preclude the need for secure coding practices in the application that consumes the validated data.
Read More...