#jaxb — Public Fediverse posts

I was asked why I use an #xpath approach to read #xml files in #java, rather than #marshaling using #jaxb or #jaxws. Well: apart from not feeling like spending the effort to recreate the XML document in Java, marshaling relies relies on functionality that can be abused and exploited easily, as a result of the XML standards. At least with the #Saxon xpath library, that particular danger can be avoided. #cybersecurity

I was asked why I use an #xpath approach to read #xml files in #java, rather than #marshaling using #jaxb or #jaxws. Well: apart from not feeling like spending the effort to recreate the XML document in Java, marshaling relies relies on functionality that can be abused and exploited easily, as a result of the XML standards. At least with the #Saxon xpath library, that particular danger can be avoided. #cybersecurity