LAB 205 – Defending Java Applications Against XPath Injection

Course Overview


XPath injection vulnerabilities occur when an application concatenates untrusted input into XPath expressions. The exact impact of XPath Injection depends on the purpose of the XPath expression in the application, but usually, the impact is either information disclosure or authentication bypass. This Defending Java Applications Against XPath Injection Skill Lab uses an interactive simulation to train developers to identify and mitigate XPath Injection vulnerabilities before they negatively impact your organization.

After completing this lab, the learner will understand how to defend Java applications against XPath Injection attacks and receive hands-on experience implementing effective mitigation. This includes testing for XPath Injection vulnerabilities and using parameterized access methods instead of concatenating untrusted data into XPath expressions.

Looking To Learn More?

Request more information on our courses and labs.

* required

Course Details

Course Number: LAB 205
Course Duration: 5 minutes
Course CPE Credits: .1

NICE Work Role Category

PlatformStandardTechnology

Available Languages

  • English