This was in PHP but the problem exists in most languages. For all of you python programmers out there check out defusedxml and use it. They have a good explanat

This was in PHP but the problem exists in most languages. For all of you python programmers out there check out defusedxml and use it. They have a good explanation of many of the dangers in XML parsing: https://pypi.python.org/pypi/defusedxml https://pypi.python.org/pypi/defusedxml