XOM API for Processing XML with Java

[Elliotte Harold <elharo AT metalab.unc.edu>]

Wolfgang Hoschek wrote:

> XPath injection (i.e. a query that is formed by plain string 
> concatenation of query template and user provided string) is a different 
> problem, but potentially serious nonetheless, just as SQL injection is. 

It's real, though I've never seen it come up in practice, unlike SQL 
injection which happens all the time. However, it is in now way affected 
by the question of whether or not we allow CDATA sections in documents.

--
Elliotte Rusty Harold  elharo AT metalab.unc.edu
Java I/O 2nd Edition Just Published!
http://www.cafeaulait.org/books/javaio2/
http://www.amazon.com/exec/obidos/ISBN=0596527500/ref=nosim/cafeaulaitA/