3 ms·
what exactly is the security concern with xslt?
by p0w3n3d 1y ago
what exactly is the security concern with xslt?
- JimDabell 1y agoThis is answered in the article.
- TingPing 1y agoIt parses untrusted input, the library is basically unmaintained, it’s not often audited but anytime someone looks they find a CVE.
- jeffbee 1y agoXSLT the idea contains few (but not zero) unavoidable security flaws. libxslt the library is a barely-maintained dumpster fire of bad practices.
- ryoshu 1y agoThey should audit LLMs.