---
title: "Discussion on \"XML external entity injection: Secure coding in Java\" | Hashnode"
description: "Discussion on \"XML external entity injection: Secure coding in Java\". Learn how XXE injection works in Java and Spring, which XML parsers are vulnerable by default, and how to configure them securely. Part 1."
url: "https://hashnode.com/posts/xml-external-entity-injection-secure-coding-in-java/6accdf4a1923ddc65fd9dd33"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [XML external entity injection: Secure coding in Java](https://securitydepth.hashnode.dev/xml-external-entity-injection-secure-coding-in-java?utm_source=hashnode&utm_medium=feed)

Learn how XXE injection works in Java and Spring, which XML parsers are vulnerable by default, and how to configure them securely. Part 1.

Oct 12 · 24 min read · securitydepth.hashnode.dev  
Read the article

-   [#java](https://hashnode.com/tag/java)
-   [#spring-boot](https://hashnode.com/tag/spring-boot)
-   [#security](https://hashnode.com/tag/security)
-   [#application-security](https://hashnode.com/tag/application-security)
-   [#secure-coding](https://hashnode.com/tag/secure-coding)

## Written by

[Milan Nikic](https://hashnode.com/@nick79)

@nick79 · Belgrade, Serbia

  
[View profile](https://hashnode.com/@nick79)

Secure coding patterns and security architecture insights

20+ years in software development, now focused on application security. Writing hands-on guides on secure coding patterns, vulnerability analysis, and security architecture.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.