---
title: "Discussion on \"XML external entity injection: A security architect's perspective (Part 2)\" | Hashnode"
description: "Discussion on \"XML external entity injection: A security architect's perspective (Part 2)\". Disabling DTDs in one parser doesn't scale. How to eliminate XXE architecturally: central parser policy, gateway validation, and dependency control."
url: "https://hashnode.com/posts/xml-external-entity-injection-a-security-architect-s-perspective-part-2/6ad8818ba7508b2879f9bd09"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [XML external entity injection: A security architect's perspective (Part 2)](https://securitydepth.hashnode.dev/xml-external-entity-injection-a-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed)

Disabling DTDs in one parser doesn't scale. How to eliminate XXE architecturally: central parser policy, gateway validation, and dependency control.

Oct 21 · 18 min read · securitydepth.hashnode.dev  
Read the article

-   [#xxe](https://hashnode.com/tag/xxe)
-   [#security-architecture](https://hashnode.com/tag/security-architecture)
-   [#application-security](https://hashnode.com/tag/application-security)
-   [#owasp](https://hashnode.com/tag/owasp)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)

## Written by

[Milan Nikic](https://hashnode.com/@nick79)

@nick79 · Belgrade, Serbia

  
[View profile](https://hashnode.com/@nick79)

Secure coding patterns and security architecture insights

20+ years in software development, now focused on application security. Writing hands-on guides on secure coding patterns, vulnerability analysis, and security architecture.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.