title: How secure are XPS documents?
body: <p>How secure are XPS documents? After looking from the inside of an <a href="http://en.wikipedia.org/wiki/Open_XML_Paper_Specification" rel="nofollow noreferrer">XPS</a> document, found the Unicode-string property. Could someone inject e.x. a script into the Unicode string property?</p>
  
  <p>How does the XPS viewer treat the Unicode string property? As a collection of glyphs or what?</p>
  
  <p><strong>UPDATE:</strong> I added the following string as UnicodeText </p>
  
  <pre><code>!@#$%^&amp;*()_+ 
  </code></pre>
  
  <p>and the XPS viewer refused to open the file. This is how this question came into my mind</p>