[ILUG] is libxml(2) insecure?

[Laur Ivan]

Hi all,

I guess the subject says it all :). I'm thinking of writing a rc.d daemon and 
had a look in /etc/sysconfig to get a feel for the type of configuration 
files used by the "network start/stop". ...and noticed that all files I 
looked at are ".ini" style (aka "Key=Value"). Few questions arise:
1. Is this the generic case? The only place I remember seeing XML used is the 
fontconfig (and more recently, D-BUS).
2. Besides the ability to include such linear files in scripts through ". 
script", is there any other reason?
3. Is the XML library a security risk? Would it be ok use it for configuration 
storage/processing?

Cheers,

L