Skip to main content
Offline·Progress is saved on this device and syncs the next time you open the app online.
Endpoint, Host & Application

XML

Extensible Markup Language

A structured data format; XXE and injection target its parsers.

XML is a structured, tag-based format widely used for configuration, documents, and data exchange between applications and web services. Its security relevance comes from how parsers handle it: XML external entity processing can be abused to read local files, reach internal systems, or cause denial of service. Improper input handling also enables injection into XML-based queries. The standard defense is to disable external entity resolution and validate or sanitize input, a frequent exam pairing with the XXE attack.

Related terms

Looking XML up is step one. Getting tested on it is step two.

A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.

Not affiliated with or endorsed by CompTIA.