XPath injection

All-in-One Guides:Web application security -- How to prevent attacks

Types of attacks

XPath injection

Display in sets of:
  • How to prevent XPath injection

    Tip -  Parameterization and input validation are invaluable to application security. Which method is best for preventing XPath injection attacks? Chris Eng explains.

  • Malicious code injection: It's not just for SQL anymore

    Tip -  Injection attacks are ubiquitous, and SQL injection is only one version of the exploit. S.P.I. Dynamics' Bryan Sullivan describes these attacks and how to prevent them.

  • Understanding XPath injection

    Ask the Expert -  XPath injection is similar to SQL injection and other injection attacks, but this XML exploit has its own unique set of issues. Web services expert Rami Jaamour details how these exploits work -- and how you can avoid them.