3 ms·
I've seen base64 encoded XML embedded inside a form post. I think it was for SAML? I was truly horrified.
by icedchai 4y ago
I've seen base64 encoded XML embedded inside a form post. I think it was for SAML? I was truly horrified.
- breakfastduck 4y agothe fun truly starts when you get escaped xml inside xml attributes
- paulddraper 4y agoYes, that is for SAML. But... What do would you do instead?
- icedchai 4y agoYep, you’re right. Not much of a choice given the limitations of HTML forms, etc.
- magicalhippo 4y agoSo many seem to have "base64 damage", they get confused when they don't have to base64 encode something. To attach documents (e.g. scans) to a given order in our API, you just POST the raw file directly to the endpoint with appropriate content type. Simple. Yet I get so many questions like "but we base64-encode them first?" or similar. One dev mentioned he'd never done such a "raw" POST.
- icedchai 4y agoThere's a lot of weird APIs out there. I've seen some where a file is uploaded by base64 encoding it and putting it into JSON: { "file": base64blob }