Hacker News new | ask | show | jobs
by po 4529 days ago
This was in PHP but the problem exists in most languages. For all of you python programmers out there check out defusedxml and use it. They have a good explanation of many of the dangers in XML parsing:

https://pypi.python.org/pypi/defusedxml