/blob/main/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/CsrfTokenScanRule.java">CsrfTokenScanRule.java</a>
<br>
Alert ID: <a href="https://www.zaproxy.org/docs/alerts/20012/">20012</a>.

<h2 id="id-40044">Exponential Entity Expansion (Billion Laughs Attack)</h2>
This rule attempts to identify the "Billion Laughs" vulnerability in servers that accept XML or YAML files.
<p>
Latest code: <a href="https://github.com/zaproxy/zap-extensions/blob/main/addOns/ascanrulesBeta/src/main/