
XML Signature Wrapping in Plain Language With a Toy Example
Signature wrapping moves a signed element so the signature verifies while the app reads another. A toy HMAC example shows the gap and the fix.
Tag
590 posts

Signature wrapping moves a signed element so the signature verifies while the app reads another. A toy HMAC example shows the gap and the fix.

Fix an Excel formula that shows as text instead of a result: Text format, Show Formulas, a leading apostrophe, manual calculation and scripts.

Write CSV in Python with csv.writer and DictWriter: newline='', the quoting modes, how None, floats, dates and bytes are written, and what Excel needs.

csv.DictReader turns each CSV row into a dict keyed by the header. See what it does with missing and extra fields, BOMs, duplicate headers and blank lines.

Parse untrusted XML in PHP 8.5 and Node 24: why LIBXML_NOENT is the dangerous flag, what DOMDocument does, and how two Node parsers behave.

Pick one key style, enforce it with a JSON Schema pattern and fix old files with a yq command that renames every key. Real output for each step.

Read CSV in Python with csv.reader: open with newline='', handle quoted commas and multi-line fields, set the dialect, and stream millions of rows.

Build nested JSON from MySQL tables with JSON_OBJECT and JSON_ARRAYAGG, and handle booleans, ordering, empty results and join fan-out.

Parser settings that stop XXE in Java and Python, tested on one file: which Java features block it, what each error says, and the lxml options.

A working guide to CSV in Python: csv module, DictReader, pandas, polars and DuckDB measured on 2,000,000 rows, plus the encoding, quoting and type rules.

Export a DuckDB query to CSV with COPY. Control the delimiter, NULL text, quoting, date format and compression, and split output into one file per value.

What to write in YAML comments, what to leave out and how to lint comment style. Includes yamllint output for spacing and indentation, and what tools drop.