1

I am coding an anonymous WCF service that allows others to post XML into it.

Does using different kinds of XML parsers XDocument, XMLDocument, or even 3rd party parsers increase the attack surface area? (Buffer overflows, etc).

3

Yes. By definition, allowing user interaction with additional software increases the Attack surface.

  • Exactly. The more things, the more things that can be broken. – Matthew Read Jan 23 '11 at 0:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.