The XML Factor
Guardado en:
| Udgivet i: | Network Computing vol. 15, no. 11 (Jun 10, 2004), p. 79-81 |
|---|---|
| Hovedforfatter: | |
| Udgivet: |
Informa
|
| Fag: | |
| Online adgang: | Citation/Abstract Full Text + Graphics Full Text - PDF |
| Tags: |
Ingen Tags, Vær først til at tagge denne postø!
|
| Resumen: | SQL Injection is a common Web application attack, and XML is vulnerable to it as well. Validating your incoming XML documents against XML schema doesn't necessarily prevent this attack. That's because the type "xsdistring" does not preclude special characters and specific SQL keywords that are, after all, of the correct type. To prevent ISO character sets from being exploited, declare the ISO character set you're using for translating Unicode input into ASCII. |
|---|---|
| ISSN: | 1046-4468 0743-9504 0892-2802 |
| Fuente: | ABI/INFORM Global |