https://www.baszerr.eu/ Wed, 06 May 2026 07:55:07 +0000 FeedCreator 1.8 https://www.baszerr.eu/lib/exe/fetch.php?media=wiki:dokuwiki.svg https://www.baszerr.eu/ https://www.baszerr.eu/doku.php?id=blog:2021:05:11:2021-05-11_-_die_xml_just_die <h1 class="sectionedit1" id="die_xml_just_die">2021-05-11 - die XML! just die!</h1> <div class="level1"> <p> ages have passed since i&#039;ve moved away from <a href="https://en.wikipedia.org/wiki/XML" class="interwiki iw_wp" title="https://en.wikipedia.org/wiki/XML">XML</a> to <a href="https://en.wikipedia.org/wiki/JSON" class="interwiki iw_wp" title="https://en.wikipedia.org/wiki/JSON">JSON</a> in my projects (both pet and professional). later on i&#039;ve learned about <a href="https://en.wikipedia.org/wiki/XML external entity attack" class="interwiki iw_wp" title="https://en.wikipedia.org/wiki/XML external entity attack">XML external entity attack</a>, which was enough to roll my eyes on the format itself… and today i came across yet another XML attack^{<a href="#fn__1" id="fnt__1" class="fn_top">1)</a>} – <a href="https://en.wikipedia.org/wiki/billion laughs attack" class="interwiki iw_wp" title="https://en.wikipedia.org/wiki/billion laughs attack">billion laughs attack</a>. complexity is a sworn enemy of security. keeping things simple has huge potential. so… could XML finally die, please? </p> </div> <div class="footnotes"> <div class="fn">^{<a href="#fnt__1" id="fn__1" class="fn_bot">1)</a>} <div class="content">ok – it&#039;s not exclusive to XML, but you get the point…</div></div> </div> anonymous@undisclosed.example.com (Anonymous) Tue, 15 Jun 2021 20:09:43 +0000