Merge pull request #1 from jkowalleck/patch-1

Update xmlcatalog.xml with a comment about DTD

Author: Nicolas-Peiffer

schema/xmlcatalog.xml

@@ -1,11 +1,12 @@
 <?xml version="1.0"?>
+<!-- to prevent unintendedn notwork access, we do not set a DTD/XSD in this XML -->
 <catalog xmlns="urn:oasis:names:tc:entity:xmlns:xml:catalog">
-  <uri name="http://cyclonedx.org/schema/spdx" uri="spdx.xsd"/>
+  <uri name="http://cyclonedx.org/schema/spdx"    uri="spdx.xsd"/>
   <uri name="http://cyclonedx.org/schema/bom/1.0" uri="bom-1.0.xsd"/>
   <uri name="http://cyclonedx.org/schema/bom/1.1" uri="bom-1.1.xsd"/>
   <uri name="http://cyclonedx.org/schema/bom/1.2" uri="bom-1.2.xsd"/>
   <uri name="http://cyclonedx.org/schema/bom/1.3" uri="bom-1.3.xsd"/>
   <uri name="http://cyclonedx.org/schema/bom/1.4" uri="bom-1.4.xsd"/>
   <uri name="http://cyclonedx.org/schema/bom/1.5" uri="bom-1.5.xsd"/>
   <uri name="http://cyclonedx.org/schema/bom/1.6" uri="bom-1.6.xsd"/>
-</catalog>
+</catalog>