> First _allowable_ 256 UTF-8 characters are for sure legal in CDATA > section. What about 0x0..0x19? These chars are invalid in CDATA sections except 0x9, 0xA and 0xC.