XML

  1. XML Security Considerations
    1. Common Security Vulnerabilities
      1. XML External Entity (XXE) Attacks
        1. Attack Vectors
          1. Prevention Techniques
            1. Parser Configuration
            2. XML Injection Attacks
              1. Billion Laughs Attack
                1. Schema Poisoning
                2. Input Validation
                  1. Schema-based Validation
                    1. Content Filtering
                      1. Size Limitations
                        1. Character Restrictions
                        2. Secure Processing
                          1. Parser Security Settings
                            1. Entity Resolution Control
                              1. Resource Limits
                                1. Error Handling
                                2. Encryption and Signing
                                  1. XML Encryption
                                    1. XML Digital Signatures
                                      1. Key Management

                                    Previous

                                    8. XML Best Practices and Guidelines

                                    Go to top

                                    Next

                                    10. XML Tools and Technologies