Skip to content

Tracks

AI-assisted engineering Working with AI Agents System design Core systems Data and AI systems Coding Coding problems Code review On-call SQL

Practice

Paths Concept guides

FreeAd-supported

The plan adds AI feedback and removes ads.

Concept guides/Security review/XML external entity (XXE) injection

CodingSecurity review

XML external entity (XXE) injection

Hard3 min read

Questions it teaches

XML bomb via billion laughsMedium20 min XML parser vulnerable to XXEHard30 min XML parser allows external entitiesHard30 min SAX parser XXE not disabledHard22 min XML parser enables external entitiesHard20 min

Related

Security review Correctness review Secure coding Specs and prompts

Builds on: Correctness review

Spotting correctness bugs3 min Structured logging3 min

Builds on: Secure coding

Applied crypto & auth3 min WAL replay (crash recovery)3 min

Related: Specs and prompts

Prompting & writing specs3 min Describing your own practice6 min

© 2026 Prep Room·From California·AI can make mistakes.

About Legal Contact Cookies Your privacy choices

Home Review Tracks Paths