Title: Theory / Unimportant / CS / Programming / Python / Lib / XML 3.5

Name: Billion Laughs attack
Definition: Define \(x_0="lol"\)
for \(i\) from 1 to \(10\)
\(x_i=x_{i-1}*10\)
compute \(x_{10}\)
Page: https://docs.python.org/3.5/library/xml.html
https://en.wikipedia.org/wiki/Billion_laughs_attack
Name2: exponential entity expansion
Name3: XML bomb

Name: quadratic blowup entity expansion
Definition: Having a string of length \(n\) repeated \(n\) times explictly in order to have a quadratic memory usage in the length of the input
Page: https://docs.python.org/3.5/library/xml.html

Name: external entity expansion
Definition: Entity pointing to external resources/local files
Page: https://docs.python.org/3.5/library/xml.html

Name: Decompression bomb
Page: https://docs.python.org/3.5/library/xml.html
https://en.wikipedia.org/wiki/Billion_laughs_attack
https://en.wikipedia.org/wiki/Zip_bomb
Name2: Zip bomb
Intuition: a malicious archive file designed to crash or render useless the program or system reading it.
Name3: Zip of death