Simon Willison’s Weblog

Tip: Configure SAX parsers for secure processing. Explains the billion laughs attack, among others.

Posted 23rd August 2008 at 11:12 am