this post was submitted on 04 Jul 2023
5 points (100.0% liked)
appsec
331 readers
4 users here now
A community for all things related to application security.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Most of the vulnerabilities in SAML are derived by the fact that XML it’s always a nightmare to parse… I wonder why people keep using it.
Historical decisions seem to be the most common reasons
Yes, but usually “historical decisions” is an acronym for “we are not able to manage that because we designed our systems in the worst possible way”
… and those decisions are sometimes rooted in "we don't have the people and/or money to spend on a new development in this module."
And everyone else is stuck either accepting that or spending the resources to ameliorate the situation. :/