Quantcast
Channel: BOT24
Viewing all articles
Browse latest Browse all 8064

Die Laughing from a Billion Laughs

$
0
0
Recursion is the process of repeating items in a self-similar way, and that’s what the XML Entity Expansion (XEE)[1] is about: a small string is referenced a huge number of times.

Technology standards sometimes include features that affect the security of applications. Amit Klein found in 2002 that XML entities could be used to make parsers consume an unlimited amount of resources and then crash, which is called a billion laughs attack.

more here........http://blog.ioactive.com/2014/11/die-laughing-from-billion-laughs.html

Viewing all articles
Browse latest Browse all 8064

Trending Articles