XML Threat Protection

Malicious attacks on XML applications typically involve large, recursive payloads, XPath/XSLT or SQL injections, and CData. Using the XML Threat Protection policy, you can limit the size of things, such as maximum node depth and text node length, in your XML code to thwart malicious attacks. You can limit the size of comments to prevent invasions through CData, for example.

Protecting XML Applications

Configure XML threat protection using the procedure to protect XML applications.

Configure XML threat protection. Set limits, and click apply to start protecting your XML code. The following example shows configuration of an XML threat protection policy.

Responses to XML Threat Protection Policies

200

Message successfully sent.
400 Bad Request

Any request that violates the configured limits causes a Bad Request error.