Enabling XML validation
An XSD specifies how XML should be composed. The schema helps define an XML structure and, with it, prevents unwanted elements, attributes, and text. Without an XSD, a .NET parser will blindly process the XML data and increase the risk of an XXE injection vulnerability in code.
This recipe will teach you how to create the use XSD and validate XML data.
Getting ready
To complete the recipes in this chapter, we will need the sample Online Banking app.
Open the command shell and download the sample Online Banking app by cloning the ASP.NET Secure Coding Cookbook repository, as follows:
git clone https://github.com/PacktPublishing/ASP.NET-Core-Secure-Coding-Cookbook.git
Run the sample app to verify that there are no build or compile errors. In your command shell, navigate to the sample app folder at \Chapter05\missing-validation\before\OnlineBankingApp and run the following command:
dotnet build
The dotnet build command will build our sample...
