vuln.xml is not XML

[Dan Langille]

I refer to my previous message regarding the difficulties in parsing
vuln.xml.  I have since learned that any markup (e.g. <p>) should be be in
a CDATA section.

See http://www.w3.org/TR/REC-xml/ and look at section 2.7.

   CDATA sections begin with the string "<![CDATA[" and end with the
   string "]]>":]

I propose that markup be enclosed with a CDATA section.

-- 
Dan Langille - http://www.langille.org/