Source: blog.shiftleft.io
Intro to XXE Vulnerabilities: AppSec SimplifiedCategory: Data, encryption
And welcome to the first installment of AppSec Simplified. DTDs are used to define the structure of an XML document and the data it contains.
The best way to prevent XXEs is to limit the capabilities of your XML parsers.
One approach you can take is to go through your application’s functionalities that process XML documents and test them with malicious XML input. For example, you can submit this XML document and see if the file file:///etc/hostname gets sent back to you.
The best way to prevent XXEs is to limit the capabilities of your XML parsers.
One approach you can take is to go through your application’s functionalities that process XML documents and test them with malicious XML input. For example, you can submit this XML document and see if the file file:///etc/hostname gets sent back to you.
Related Articles
Community Partners
DevOps Careers