_Processing)
XML External Entity (XXE) Processing | OWASP Foundation
Thank you for visiting OWASP.org. We have migrated our community to a new web platform and regretably the content for this page needed to be programmatically ported from its previous wiki page. There’s still some work to be done. NVD Categorization CWE-611: Improper Restriction of XML External Entity Reference: The software processes an XML document that can contain XML entities with URIs that res
[ã‚»ã‚ュリティ]XMLã‚’parseã™ã‚‹ã‚¢ãƒ—リã®ã‚»ã‚ュリティ|2009-06-21 - T.Teradaã®æ—¥è¨˜
「XMLã€ã€Œã‚»ã‚ュリティã€ã¨ã„ã†å˜èªžã§Web検索ã™ã‚‹ã¨ã€å¤šãヒットã™ã‚‹ã®ã¯XMLデジタル署åã‚„XMLæš—å·ãªã©ã‚’説明ã—ãŸWebページã§ã™ã€‚ 本日ã®æ—¥è¨˜ã§ã¯ã€ãã‚Œã¨ã¯ã¡ã‚‡ã£ã¨é•ã†ãƒ†ãƒ¼ãƒžï¼ˆXXEã¨å‘¼ã°ã‚Œã‚‹æ”»æ’ƒï¼‰ã«ã¤ã„ã¦æ›¸ãã¾ã™ã€‚ 脆弱ãªã‚³ãƒ¼ãƒ‰ã¨æ”»æ’ƒæ–¹æ³• ã•ã£ãã脆弱性ãŒã‚るサンプルプãƒã‚°ãƒ©ãƒ ã§ã™ã€‚ import java.io.*; import javax.servlet.*; import javax.servlet.http.*; import org.w3c.dom.*; import org.apache.xerces.parsers.*; import org.xml.sax.*; public class Test1 extends HttpServlet { public void service(HttpServletRequest request, HttpServletRe
![[ã‚»ã‚ュリティ]XMLã‚’parseã™ã‚‹ã‚¢ãƒ—リã®ã‚»ã‚ュリティ|2009-06-21 - T.Teradaã®æ—¥è¨˜](https://cdn-ak-scissors.b.st-hatena.com/image/square/06a15c64ba0ceec233d86d71001ebb29a9dcbf5d/height=288;version=1;width=512/https%3A%2F%2Fcdn.blog.st-hatena.com%2Fimages%2Ftheme%2Fog-image-1500.png)
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - tokuhirom/toydi
[PDF] ゴールドマン・サックス㮠Javaã¸ã®å–り組ã¿![[PDF] ゴールドマン・サックス㮠Javaã¸ã®å–り組ã¿](https://cdn-ak-scissors.b.st-hatena.com/image/square/abb0969d59b8a8d0a470a721d3cc3fb15c2bddf9/height=288;version=1;width=512/https%3A%2F%2Fopengraph.githubassets.com%2Fafabd6739b03d06590b9f40fda3c8a3c3601e80e0ff9147c301028ed527d2d02%2Feclipse%2Feclipse-collections)
{{#tags}}- {{label}}
{{/tags}}