Tag

documentbuilderfactory

Safeguard articles tagged "documentbuilderfactory" — guides, analysis, and best practices for software supply chain and application security.

1 article

Industry Analysis

XXE Prevention in Java: Hardening DocumentBuilderFactory

Java's DocumentBuilderFactory parses XML with external entities on by default, turning XML uploads into file-read and SSRF vectors. Here is how to lock it down.

Oct 22, 20258 min read