← Back to context Comment by p0w3n3d 7 hours ago what exactly is the security concern with xslt? 4 comments p0w3n3d Reply TingPing 7 hours ago It parses untrusted input, the library is basically unmaintained, it’s not often audited but anytime someone looks they find a CVE. JimDabell 7 hours ago This is answered in the article. jeffbee 6 hours ago XSLT the idea contains few (but not zero) unavoidable security flaws.libxslt the library is a barely-maintained dumpster fire of bad practices. ryoshu 6 hours ago They should audit LLMs.
TingPing 7 hours ago It parses untrusted input, the library is basically unmaintained, it’s not often audited but anytime someone looks they find a CVE.
jeffbee 6 hours ago XSLT the idea contains few (but not zero) unavoidable security flaws.libxslt the library is a barely-maintained dumpster fire of bad practices. ryoshu 6 hours ago They should audit LLMs.
It parses untrusted input, the library is basically unmaintained, it’s not often audited but anytime someone looks they find a CVE.
This is answered in the article.
XSLT the idea contains few (but not zero) unavoidable security flaws.
libxslt the library is a barely-maintained dumpster fire of bad practices.
They should audit LLMs.