Review Note
Last Update: 04/27/2023 06:14 AM
Current Deck: Software Security
New Card (Unpublished)Currently Published Content
Front
Back
No published tags.
Pending Suggestions
Field Change Suggestions:
Front
Commit #1542
What are four signs your application is vulnerable to XML based attacks?
Back
Commit #1542- Webserver accepts XML or XML uploads (including files such as
svg
which use XML) - Application uses SAML (Security Assertion Markup Language) for SSO (SAML uses XML)
- XML parsers in the application has DTDs enabled
- SOAP (Simple Object Access Protocol — precursor of REST APIs) version < 1.2