From f4c1afb0651657d284a5491347b44e512b1d638d Mon Sep 17 00:00:00 2001 From: Renzo Kottmann Date: Fri, 21 Jun 2019 14:44:06 +0200 Subject: [PATCH] Add OWASP recommendation link --- docs/qs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/qs.md b/docs/qs.md index 6b08310..cea4622 100644 --- a/docs/qs.md +++ b/docs/qs.md @@ -10,4 +10,4 @@ Some information on how we aim to ensure certain level of quality. ## XML-Security Best Practices -* We follow the recommndations on best practices for JAVA XML to mitigate XML eXternal Entity (XXE) attacks and per default we do not allow external references on Entities and XIncludes \ No newline at end of file +* We follow the [OWASP recommendations](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/XML_Security_Cheat_Sheet.md) on best practices for JAVA XML to mitigate XML eXternal Entity (XXE) attacks and per default we do not allow external references on Entities and XIncludes \ No newline at end of file