We don't allow %ES; for textStandardZeroRep. But we do allow character class entities like %NL; %WSP; %WSP+; and... problematic: %WSP*;

I claim if you don't allow %ES; you should not allow %WSP*; because it matches zero-or-more, allowing an empty-string to match in principle.

Leaving off WSP* only eliminates the zero-characters option, as WSP+ is available.

There are probably other places in the spec that have this same issue. Basically, anyplace that %ES is disallowed but the other character class entities are allowed.



--
Mike Beckerle | OGF DFDL Workgroup Co-Chair | Tresys Technology | www.tresys.com