function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
SK_SinghSK_Singh 

How to Prevent XML injection Attacks??

Hi All,

 

Anyone knows how to prevent XML Injection Attacks. Actually,  I am working on salesforce- PHP integration Project. When, I run a Burp report, then it says that 'The WSDL parameter appears to be vunerable to XML injection'.

Thanks in advance........

Dev_RDev_R

You can use 'libxml_disable_entity_loader()' function to disable external entity resolution. It will help you check if its from a vulnerable scopeand   will send you an alert . 

 

 for exact functioning you can refer Prevent XML Injection Attacks