XML External Entity Injection

If you are already familiar with XML and DTD, feel free to skip to the fun part. What is XML? XML is a shorthand for eXtensible Markup Language which is a very simple but flexible text format used to electronically share structured data via the internet. XML is a markup language based on SGML - a language which is describing other languages. How does it work? XML is very strict about formatting, meaning that if the formatting is off, programs that rely on it will return an error....

December 28, 2021 · 8 min · Lazar