Rating is available when the video has been rented.
This feature is not available right now. Please try again later.
Published on Apr 12, 2015
"Speaker: Tom Eastman
It’s not in the OWASP Top 10, but you don’t have to look far to hear stories of security vulnerabilities involving deserialization of user input. In this talk I’ll go over what the threat is and how you might be making yourself vulnerable. I’ll cover the features (not bugs: features) of XML, YAML, and JSON that make them surprisingly dangerous, and how to protect your code from them.