Milan Nikic (@nick79)

XML external entity injection: A security architect's perspective (Part 2)

In Part 1 of this series, we examined XXE injection from a developer's perspective, covering secure coding patterns across DocumentBuilderFactory, SAXParser, StAX, TransformerFactory, JAXB, and Jackso

Oct 21 · 18 min readsecuritydepth.hashnode.dev

XML external entity injection: Secure coding in Java

XML External Entity injection remains a persistent threat in enterprise applications. According to the OWASP Top 10 2025, XXE falls under A02:2025 Security Misconfiguration (CWE-611), reflecting that

Oct 12 · 24 min readsecuritydepth.hashnode.dev

Server-Side Request Forgery: Security Architect's Perspective (Part 2)

In Part 1 of this series, we examined SSRF from a developer's perspective, covering secure coding patterns, input validation, allow lists, DNS resolution checks, and HTTP client configuration in Java

Aug 18 · 17 min readsecuritydepth.hashnode.dev

Server Side Request Forgery in Java and Spring: Secure Coding Patterns

Server Side Request Forgery, commonly abbreviated as SSRF, ranks among those vulnerabilities that look trivial during code review but escalate into full-blown incidents once they hit production. The c

Aug 4 · 20 min readsecuritydepth.hashnode.dev

File Upload Vulnerabilities: Security Architect's Perspective (Part 2)

Part 1 covered the technical implementation of secure file upload handling in Java and Spring. It went through content validation with Apache Tika, path traversal defenses, generated filenames, image

Jul 27 · 16 min readsecuritydepth.hashnode.dev

Milan Nikic

About

Available for

Milan Nikic's blogs

XML external entity injection: A security architect's perspective (Part 2)

XML external entity injection: Secure coding in Java

Server-Side Request Forgery: Security Architect's Perspective (Part 2)

Server Side Request Forgery in Java and Spring: Secure Coding Patterns

File Upload Vulnerabilities: Security Architect's Perspective (Part 2)

Milan Nikic

About

Available for

Milan Nikic's blogs

XML external entity injection: A security architect's perspective (Part 2)

XML external entity injection: Secure coding in Java

Server-Side Request Forgery: Security Architect's Perspective (Part 2)

Server Side Request Forgery in Java and Spring: Secure Coding Patterns

File Upload Vulnerabilities: Security Architect's Perspective (Part 2)

Milan Nikic

About

Available for

Milan Nikic's blogs

XML external entity injection: A security architect's perspective (Part 2)

XML external entity injection: Secure coding in Java

Server-Side Request Forgery: Security Architect's Perspective (Part 2)

Server Side Request Forgery in Java and Spring: Secure Coding Patterns

File Upload Vulnerabilities: Security Architect's Perspective (Part 2)

Search Hashnode

Milan Nikic

About

Available for

Milan Nikic's blogs

XML external entity injection: A security architect's perspective (Part 2)

XML external entity injection: Secure coding in Java

Server-Side Request Forgery: Security Architect's Perspective (Part 2)

Server Side Request Forgery in Java and Spring: Secure Coding Patterns

File Upload Vulnerabilities: Security Architect's Perspective (Part 2)