Validating utf 8
Such a range is defined by the business requirements of the input field.
The other approaches to data validation are "known bad," which is a black list of "bad characters".
In a similar but fundamentally opposing manner, the Scandinavian character ð (eth) is included in Unicode and ISO Western but not in ASCII nor ISO Celtic.
To make matters more difficult, these two characters are assigned the same number in their respective ISO character sets.
Input validation is more than checking form field values.
The chapter on transactional analysis talks about this.
The validator will report fatal errors, non-fatal errors and warnings.
If the XSD is publicly available using HTTP and referenced through a "schema Location" or "no Namespace Schema Location", then the validator will pick it up and it doesn't need to be specified/uploaded.
Validates the XML string/file against the specified XSD string/file.
Business validation could be used to limit the value range or a transaction inputted by a user or reject input which does not make too much business sense.
Reviewing code for business validation can also include rounding errors or floating point issues which may give rise to issues such as integer overflows which can dramatically damage the bottom line.
A "Known good" approach (white-list), which is a little weaker, but more flexible, is common.
Known good only permits characters/ASCII ranges defined within a white-list.