Tag
xxe-fix-java
Safeguard articles tagged "xxe-fix-java" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Vulnerabilities
XXE Attack Walkthroughs: What a Good Demo Actually Shows
Most XXE video walkthroughs stop at proof-of-concept file reads — here's what a genuinely useful one covers, plus the Java fix that actually closes the hole.
Mar 18, 20255 min read
Vulnerabilities
Fixing XXE in Java: A Parser-by-Parser Hardening Guide
A parser-by-parser XXE fix for Java, covering DocumentBuilderFactory, SAXParser, XMLInputFactory, TransformerFactory, and the XML libraries that still ship unsafe defaults.
Feb 18, 20256 min read