Beware XPath Injection

I did not know XPath injection even existed. Kind of makes sense that it does though. XPath is a way to address specific nodes in an XML document. For example, in this document: <doc> <Title>ABC Document</Title> </doc> I would address the Title element as: /doc/Title Kind of like walking through directories on a disk. Of course, XPath can get much more complicated