Question 634. How You Will Protect / Secure A Web Service?
Web services must validate all XML content input before consuming it, and should include: Validating inputs using a strong allow list. Validating inputs against external entity attacks. Validating inputs against malformed XML entities. Validating inputs against XML bomb attacks.
