XML parsers can resolve external entities in ways that expose data or trigger unintended requests. Developers learn how parser behavior creates this risk, examine how external entities can be abused, and review configuration practices that prevent unsafe resolution.

Participants in this module will…

• Obtain a background on XML and XML parser capabilities
• Learn about external entities and how they are subject to abuse
• Understand how to configure XML parsers to prevent such abuse