<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: External Code in the Software Development Process</title>
	<atom:link href="http://www.veracode.com/blog/2007/10/external-code-in-the-software-development-process/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.veracode.com/blog/2007/10/external-code-in-the-software-development-process/</link>
	<description>Application security testing, analysis, and metrics</description>
	<lastBuildDate>Tue, 15 May 2012 22:16:53 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Zero in a bit &#187; New Attack Class: XSNADOR</title>
		<link>http://www.veracode.com/blog/2007/10/external-code-in-the-software-development-process/comment-page-1/#comment-898</link>
		<dc:creator>Zero in a bit &#187; New Attack Class: XSNADOR</dc:creator>
		<pubDate>Tue, 01 Apr 2008 05:28:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.veracode.com/blog/?p=68#comment-898</guid>
		<description>[...] you have a security blog, feel free to take part in a little Cross-Publicity Injection (XPI) and discuss this newly-discovered application security risk with your readership. Help spread the [...]</description>
		<content:encoded><![CDATA[<p>[...] you have a security blog, feel free to take part in a little Cross-Publicity Injection (XPI) and discuss this newly-discovered application security risk with your readership. Help spread the [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Alan Covell</title>
		<link>http://www.veracode.com/blog/2007/10/external-code-in-the-software-development-process/comment-page-1/#comment-592</link>
		<dc:creator>Alan Covell</dc:creator>
		<pubDate>Tue, 16 Oct 2007 22:58:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.veracode.com/blog/?p=68#comment-592</guid>
		<description>Makes one wonder about using code frameworks that can&#039;t be verified, such as MS-anything.</description>
		<content:encoded><![CDATA[<p>Makes one wonder about using code frameworks that can&#8217;t be verified, such as MS-anything.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

