New paper about modern XPath exploitation. Versions 2.0 and 3.1 introduced new risks that expanded the attack surface. New tool released.

nzt-48.org/modern-xpath...