3 ms·
Reading XML ain't secure against malicious data either.
by xapata 10y ago
Reading XML ain't secure against malicious data either.
- int_19h 10y agoI don't know why you're downvoted, because this is exactly correct. https://www.vsecurity.com//download/publications/XMLDTDEntityAttacks.pdf https://www.vsecurity.com//download/publications/XMLDTDEntit... Granted, most modern parsers disable the features that can trigger this by default. But there's still a lot of code out there compiled against libraries that did not, and some of that code is still updated and extended today.