Message
XML declaration should have version="1.0", a correct encoding, and not be standalone.
Incorrect $XMLDecl
Rule XPath:
This rule ASSERTS the following, raising an alert if FALSE:
let $unparsedXmlString := local:unparsed-xml(., $unparsedXml) returnlet $parsedXmlStart := local:xml-start($unparsedXmlString) returnlet $XMLDecl := $parsedXmlStart//XMLDecl return
$XMLDecl/VersionInfo/VersionNum = '1.0'
and $XMLDecl/EncodingDecl/EncName = ('UTF-8', 'US-ASCII', 'ISO646-US')
and not($XMLDecl/SDDecl)