=== Articles & blog posts

* https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html#xpath-injection[OWASP, XPath Injection Prevention Cheat Sheet]
* https://web.archive.org/web/20230602194100/https://www.ambionics.io/blog/hacking-watchguard-firewalls[Ambionics, XPath Injection Section of "Hacking WatchGuard Firewalls']