Research on XPath injection attack and its defense technology
Lupeijun
(School of Computer Science and Technology, Nantong University, Nantong 226019, Jiangsu)
Summary XML technology is widely used, and the security of XML data is more and more
XPath is a language used to search for information in XML documents. The following describes how to parse xml using xpath and dom4j in java. for details, refer to the following four methods for parsing XML files.
There are four classic methods to
1 Analysis of XML files in 4 ways
There are usually four classical methods for parsing XML files. There are two basic parsing methods, one called Sax and the other called Dom. Sax is based on parsing of event streams, and Dom is based on XML
First, select the nodeCommon Road-strength Expressions:
An expression
Describe
Instance
NodeName
Select all child nodes of the NodeName node
XPath ('//div ')
All child nodes of a div node
First, select the nodeCommon Road-strength Expressions:
An expression
Describe
Instance
NodeName
Select all child nodes of the NodeName node
XPath ('//div ')
All child nodes of a div node
Www.2cto.com: can be combined with this article view: http://www.bkjia.com/Article/200710/19153.html1. Xpath injection attack Overview1.1 Xpath DefinitionXPath injection attacks use the loose input and fault tolerance features of the XPath parser to
Avoid the risk of XPath Injection-- Be aware of risks to better protect XML applications
Robi Sen (rsen@department13.com), Vice President of service, Department13
With the development of simple XML APIs, Web Services, and Rich Internet Applications
This article mainly introduces a special type of code injection attack: XPath blind.
If you are unfamiliar with XPath 1.0 or need to know the basics, check the W3 Schools XPath Tutorial. You can also find a lot of articles on DeveloperWorks that use
Original: Http://ejohn.org/blog/xpath-css-selectors
Lately, I've done a lot of work to implement a parser that supports both XPath and CSS 3, and what surprises me is that they are very similar in some ways, but in other ways they are
Original: Http://ejohn.org/blog/xpath-css-selectorsLately, I've done a lot of work to implement a parser that supports both XPath and CSS 3, and what surprises me is that they are very similar in some ways, but in other ways they are completely
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.