Revisting xxe and abusing protocols - SensePost

Jan 28, 2014 ... Recently a security researcher reported a bug in Facebook that could potentially allow ... Our host would serve a tainted XRDS and our XXE would be ... To protect against this form of attack in PHP the following should be set ...

Lee mas