Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 46241

XML (Extensible Markup Language) is a set of rules for encoding documents in both human-readable and machine-readable form. Use this tag for security issues relating to the format itself, or where the fact that the data is xml-formatted is core to the question.

3 votes
4 answers
1k views

Allowing users to upload & download XML safely

We have a requirement to allow users to upload an XML document into our system. We don't process it, we just allow them to download it again. … Given various browser XSS vulnerabilities such as this: http://webstersprodigy.net/2012/02/04/serving-back-xml-for-xss/ (various flavours affecting IE, Chrome and FF) What is our best approach for safely …
James Crowley's user avatar