3 ms·
I didn't mention XML for a couple of reasons: 1. As others mentioned it can be pretty verbose (especially with doctypes and namespaces) 2. Potential security c
by thayne 8y ago
I didn't mention XML for a couple of reasons:
1. As others mentioned it can be pretty verbose (especially with doctypes and namespaces)
2. Potential security concerns (https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Pr...) although that doesn't matter so much if the configuration is trusted (not always the case though) and can be mitigated if you know what you are doing.