經得起原始碼資安弱點掃描的程式設計習慣培養(十九)_Schema allows arbitrary nodes (SIGMA.element_any_core_xsd)
Schema allows arbitrary nodes (SIGMA.element_any_core_xsd) Sigma main event: Arbitrary nodes are allowed in a valid document which makes it easier for attackers to perform attacks like XML injection. Ref: <xsd:any> Element https://learn.microsoft.com/en-us/previous-versions/dotnet/netframework-4.0/ms256043(v=vs.100) XXE的基本概念和利用方式 https://www.freebuf.com/articles/web/265324.html Structure of a content XSD document https://documentation.opencms.org/opencms-documentation/template-development/content-type-definition-with-xml-schema/structure-of-a-content-xsd-document/ 为什么要使用 XML Schema? https://www.w3school.com.cn/schema/schema_why.asp https://www.w3school.com.cn/schema/schema_complex_any.asp Allowing Any Content docstore.mik.ua/orelly/xml/xmlnut/ch16_08.htm https://docstore.mik.ua/orelly/xml/xmlnut/ch16_08.htm xsd:any:幕后故事 https://searchcloudcomputing.techtarget.com.cn/5-17839/ XML学习笔记5——XSD复杂数据类型 https://www.cnblogs.com/linjisong/p/3305228.html