Databases
StackOverflow2013
Postsdbo
POWhat's so bad about building XML with string concatenation?
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POWhat's so bad about building XML with string concatenation?
    primarykey
    data
    text
    <p>In the thread <a href="https://stackoverflow.com/questions/423823/whats-your-favorite-programmer-ignorance-pet-peeve/424058#424058">What’s your favorite “programmer ignorance” pet peeve?</a>, the following answer appears, with a large amount of upvotes:</p> <p><code>Programmers who build XML using string concatenation.</code></p> <p>My question is, why is building XML via string concatenation (such as a <code>StringBuilder</code> in C#) bad?</p> <p>I've done this several times in the past, as it's sometimes the quickest way for me to get from point A to point B when to comes to the data structures/objects I'm working with. So far, I have come up with a few reasons why this isn't the greatest approach, but is there something I'm overlooking? Why should this be avoided?</p> <ol> <li>Probably the biggest reason I can think of is you need to escape your strings manually, and most new programmers (and even some experienced programmers) will forget this. It will work great for them when they test it, but then "randomly" their apps will fail when someone throws an &amp; symbol in their input somewhere. Ok, I'll buy this, but it's really easy to prevent the problem (<a href="http://msdn.microsoft.com/en-us/library/system.security.securityelement.escape.aspx" rel="nofollow noreferrer">SecurityElement.Escape</a> to name one).</li> <li>When I do this, I usually omit the XML declaration (i.e. <code>&lt;?xml version="1.0"?&gt;</code>). Is this harmful? </li> <li>Performance penalties? If you stick with proper string concatenation (i.e. <code>StringBuilder</code>), is this anything to be concerned about? Presumably, a class like <code>XmlWriter</code> will also need to do a bit of string manipulation...</li> <li>There are more elegant ways of generating XML, such as using <code>XmlSerializer</code> to automatically serialize/deserialize your classes. Ok sure, I agree. C# has a ton of useful classes for this, but sometimes I don't want to make a class for something really quick, like writing out a log file or something. Is this just me being lazy? If I am doing something "real" this is my preferred approach for dealing w/ XML.</li> </ol>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USCommunity
    1. USwsanville
    plurals
    1. PL
      singulars
      1. LTLinked
    1. PL
      singulars
      1. LTLinked
    2. PL
      singulars
      1. LTLinked
    3. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POWhat's so bad about building XML with string concatenation?
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POWhat's so bad about building XML with string concatenation?
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. POWhat's so bad about building XML with string concatenation?
      1. This table or related slice is empty.
      1. VTUpMod
    1. This table or related slice is empty.
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload