Post

@sockpuppet.org

This is really good, and in particular, I would never use Go's encoding/xml for anything security-sensitive. blog.trailofbits.com/2025/06/17/u...

blog.trailofbits.comUnexpected security footguns in Go's parsersFile parsers in Go contain unexpected behaviors that can lead to serious security vulnerabilities. This post examines how JSON, XML, and YAML parsers in Go handle edge cases in ways that have repeated...

I think we have all learned that we should stop using XML entirely for anything security sensitive. SAML is going to kill me.

21/6/25, 6:05 pm0 reposts1 like

No replies yet.