The OWASP Top 10 is a list of the most common security risks on the Internet today.  XML External Entities comes in at the #4 spot in the latest edition of the OWASP Top 10.  In this video, John discusses this security risk and outlines some mitigation steps to make sure your web application doesn't process malicious XML data and expose sensitive information.



Related Resources: