Bjoern,
the XML Query Working Group considered your comments today
and resolved:
(1) to remove the optional encoding parameter, as you suggested
(2) that when we send the call for implementations (i.e. XQuery enters
W3C Candidate Recommendation status, expected this Summer) we
will ask implementors to draw our attention to security
considerations above and beyond those we already list, and
we'll then update the section.
Our reasoning is that we don't yet know what to identify --
e.g. it may turn out that many implementations provide
specific extensions that read or write files.
(3) we will make the Internet Type appendix normative in XQuery.
Thank you for your comments! I hope (on behalf of the WG) that
this will address your concerns.
Liam
--
Liam Quin, W3C XML Activity Lead, http://www.w3.org/People/Quin/
http://www.holoweb.net/~liam/