All-in-One Guides:Web application security -- How to prevent attacks
Types of attacks
XPath injection
-
How to prevent XPath injection
Tip - Parameterization and input validation are invaluable to application security. Which method is best for preventing XPath injection attacks? Chris Eng explains.
-
Malicious code injection: It's not just for SQL anymore
Tip - Injection attacks are ubiquitous, and SQL injection is only one version of the exploit. S.P.I. Dynamics' Bryan Sullivan describes these attacks and how to prevent them.
-
Ask the Expert - XPath injection is similar to SQL injection and other injection attacks, but this XML exploit has its own unique set of issues. Web services expert Rami Jaamour details how these exploits work -- and how you can avoid them.