# XML

XML is a markup language and restricted form of SGML used to represent structured data and processed by software modules.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## A Failed XML-Based DSL Design Using a Large Regular Expression

DevFeed: [A Failed XML-Based DSL Design Using a Large Regular Expression](<https://devfeed.tech/articles/best-of-classic-wtf-a-dumbain-specific-language-28506.md>)

Original publisher: [Read original article](<https://thedailywtf.com/articles/classic-wtf-a-dumbain-specific-language>)

Author: Remy Porter

Published: 2026-09-07T06:30:00Z

Content type: opinion

Language: en

Sources: [The Daily WTF](<https://devfeed.tech/sources/the-daily-wtf.md>)

Topics: [XML](<https://devfeed.tech/topics/xml.md>), [Structured-data](<https://devfeed.tech/topics/structured-data.md>), [bug](<https://devfeed.tech/topics/bug.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [best-of](<https://devfeed.tech/tags/best-of.md>), [bug](<https://devfeed.tech/tags/bug.md>), [code](<https://devfeed.tech/tags/code.md>), [documentation](<https://devfeed.tech/tags/documentation.md>), [domain-specific-languages](<https://devfeed.tech/tags/domain-specific-languages.md>), [dsls](<https://devfeed.tech/tags/dsls.md>), [regex](<https://devfeed.tech/tags/regex.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

The article revisits a failed attempt to build a domain-specific language with XML schemas and a 1,310-character regular expression. It describes a bug in the expression and criticizes the resulting design as an unsuccessful effort to save labor.

### Source excerpt

It's a holiday here in the US, a celebration of labor, so we're reaching back through the archives for a story about an attempt to be labor saving that was not successful. Original. --Remy I've had to write a few domain-specific-languages in the past. As per Remy's Law of Requirements Gathering, it's been mostly because the users needed an Excel-like formula language. The danger of DSLs, of course, is that they're often YAGNI in the extreme, or at least a sign that you don't really understand your problem. XML, coupled with schemas, is a tool for building data-focused DSLs. If you have some complex structure, you can convert each of its features into an XML attribute. For example, if you had a grammar that looked something like this: The Source specification obeys the following syntax source = ( Feature1+Feature2+... ":" ) ? steps Feature1 = "local" | "global" Feature2 ="real" | "virtual" | "ComponentType.all" Feature3 ="self" | "ancestors" | "descendants" | "Hierarchy.all" Feature4 = "first" | "last" | "DayAllocation.all" If features are specified, the order of features as given above has strictly to be followed. steps = oneOrMoreNameSteps | zeroOrMoreNameSteps | componentSteps oneOrMoreNameSteps = nameStep ( "." nameStep ) * zeroOrMoreNameSteps = ( nameStep "." ) * nameStep = "#" name name is a string of characters from "A"-"Z", "a"-"z", "0"-"9", "-" and "_". No umlauts allowed, one character is minimum. componentSteps is a list of valid values, see below. Valid 'componentSteps' are: - GlobalValue - Product - Product.Brand - Product.Accommodation - Product.Accommodation.SellingAccom - Product.Accommodation.SellingAccom.Board - Product.Accommodation.SellingAccom.Unit - Product.Accommodation.SellingAccom.Unit.SellingUnit - Product.OnewayFlight - Product.OnewayFlight.BookingClass - Product.ReturnFlight - Product.ReturnFlight.BookingClass - Product.ReturnFlight.Inbound - Product.ReturnFlight.Outbound - Product.Addon - Product.Addon.Service - Product.Addon.ServiceFeatu

## DocLang: a markup language for LLMs

DevFeed: [DocLang: a markup language for LLMs](<https://devfeed.tech/articles/doclang-a-markup-language-for-llms-17332.md>)

Original publisher: [Read original article](<https://research.ibm.com/blog/doclang-ai-native-doc-standard>)

Author: Kim Martineau

Published: 2026-08-12T12:00:00Z

Content type: article

Language: en

Sources: [IBM Research](<https://devfeed.tech/sources/ibm-research.md>)

Topics: [XML](<https://devfeed.tech/topics/xml.md>), [Parser](<https://devfeed.tech/topics/parser.md>), [Parsing](<https://devfeed.tech/topics/parsing.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>), [Generative AI](<https://devfeed.tech/topics/generative-ai.md>), [HTML](<https://devfeed.tech/topics/html.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [algorithms](<https://devfeed.tech/tags/algorithms.md>), [generative-ai](<https://devfeed.tech/tags/generative-ai.md>), [llms](<https://devfeed.tech/tags/llms.md>), [news](<https://devfeed.tech/tags/news.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

IBM researchers introduce DocLang, a constrained XML sub-language designed to help large language models interpret document structure. The article explains how it represents semantics, layout, bounding boxes, and reading order, and how it may reduce token use, latency, and inference costs in AI pipelines.

### Source excerpt

The lead researcher behind IBM's popular document parser, Docling, explains why generative AI needs its own document standard.

## DAC7 Reporting: A Practical Guide for Platform Operators

DevFeed: [DAC7 Reporting: A Practical Guide for Platform Operators](<https://devfeed.tech/articles/dac7-reporting-a-practical-guide-for-platform-operators-9794.md>)

Original publisher: [Read original article](<https://dodopayments.com/blogs/dac7-reporting-platforms/>)

Author: Aarthi Poonia

Published: 2026-07-31T00:00:00Z

Content type: article

Language: en

Sources: [Dodo Payments Blog](<https://devfeed.tech/sources/dodo-payments-blog.md>)

Topics: [data](<https://devfeed.tech/topics/data.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [compliance](<https://devfeed.tech/tags/compliance.md>), [data](<https://devfeed.tech/tags/data.md>), [eu](<https://devfeed.tech/tags/eu.md>), [guide](<https://devfeed.tech/tags/guide.md>), [identity](<https://devfeed.tech/tags/identity.md>), [marketplaces](<https://devfeed.tech/tags/marketplaces.md>), [platform](<https://devfeed.tech/tags/platform.md>), [tax](<https://devfeed.tech/tags/tax.md>)

### AI overview

A practical guide to DAC7 reporting for digital platform operators, covering scope, seller due diligence, required identity and earnings data, annual reporting obligations, exclusions, deadlines, and the effect of a merchant-of-record arrangement.

### Source excerpt

What DAC7 reporting requires from platforms: who must report, which activities are in scope, the seller data to collect, and the 31 January deadline.

## kPointer Replaces cw-json with Support for JSON, YAML, HTML, and XML

DevFeed: [kPointer Replaces cw-json with Support for JSON, YAML, HTML, and XML](<https://devfeed.tech/articles/goodbye-cw-json-hello-kpointer-28101.md>)

Original publisher: [Read original article](<https://commonsware.com/blog/2026/07/22/goodbye-cwjson-hello-kpointer.html>)

Author: CommonsWare

Published: 2026-07-22T12:27:15Z

Content type: release

Language: en

Sources: [The CommonsBlog](<https://devfeed.tech/sources/the-commonsblog.md>)

Topics: [data](<https://devfeed.tech/topics/data.md>), [JSON](<https://devfeed.tech/topics/json.md>), [YAML](<https://devfeed.tech/topics/yaml.md>), [HTML](<https://devfeed.tech/topics/html.md>), [XML](<https://devfeed.tech/topics/xml.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [test](<https://devfeed.tech/topics/test.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [cli](<https://devfeed.tech/tags/cli.md>), [data](<https://devfeed.tech/tags/data.md>), [html](<https://devfeed.tech/tags/html.md>), [json](<https://devfeed.tech/tags/json.md>), [sdk](<https://devfeed.tech/tags/sdk.md>), [test](<https://devfeed.tech/tags/test.md>), [testing](<https://devfeed.tech/tags/testing.md>), [xml](<https://devfeed.tech/tags/xml.md>), [yaml](<https://devfeed.tech/tags/yaml.md>)

### AI overview

kPointer replaces cw-json as a library for extracting values from structured data. It supports JSON, YAML, HTML, and XML through adapter-style abstractions, adds JavaScript access path notation, and includes conformance testing and a CLI.

### Source excerpt

The cw-json project has been replaced by kPointer -- learn what kPointer offers!

## Rich Text And Code Editing: RichTextArea And A Syntax-Highlighting CodeEditor

DevFeed: [Rich Text And Code Editing: RichTextArea And A Syntax-Highlighting CodeEditor](<https://devfeed.tech/articles/rich-text-and-code-editing-richtextarea-and-a-syntax-highlighting-codeeditor-19497.md>)

Original publisher: [Read original article](<https://www.codenameone.com/blog/rich-text-and-code-editing/>)

Author: Shai Almog

Published: 2026-06-28T00:00:00Z

Content type: article

Language: en

Sources: [CodeName One](<https://devfeed.tech/sources/codename-one.md>)

Topics: [Syntax Highlighting](<https://devfeed.tech/topics/syntax-highlighting.md>), [Code](<https://devfeed.tech/topics/code.md>), [cross-platform](<https://devfeed.tech/topics/cross-platform.md>), [Web](<https://devfeed.tech/topics/web.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Kotlin](<https://devfeed.tech/topics/kotlin.md>), [Python](<https://devfeed.tech/topics/python.md>), [CSS](<https://devfeed.tech/topics/css.md>), [JSON](<https://devfeed.tech/topics/json.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [code](<https://devfeed.tech/tags/code.md>), [code-completion](<https://devfeed.tech/tags/code-completion.md>), [cross-platform](<https://devfeed.tech/tags/cross-platform.md>), [css](<https://devfeed.tech/tags/css.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [kotlin](<https://devfeed.tech/tags/kotlin.md>), [python](<https://devfeed.tech/tags/python.md>), [syntax](<https://devfeed.tech/tags/syntax.md>), [web](<https://devfeed.tech/tags/web.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

The article describes RichTextArea and CodeEditor, two Codename One visual editors built on a shared semantic abstraction. A bundled cross-platform web-view engine is the default backend, while ports can provide optional native peers. The CodeEditor supports syntax highlighting for eight languages, themes, automatic bracket and quote closing, and asynchronous code completion.

### Source excerpt

RichTextArea and a syntax-highlighting CodeEditor, both built on a shared editor abstraction with a cross-platform web-view engine and an optional native peer.

## How to Design APIs

DevFeed: [How to Design APIs](<https://devfeed.tech/articles/how-to-design-apis-34680.md>)

Original publisher: [Read original article](<https://newsletter.systemdesigncodex.com/p/how-to-design-apis>)

Author: Saurabh Dashora

Published: 2026-06-02T06:41:25Z

Content type: tutorial

Language: en

Sources: [System Design Codex](<https://devfeed.tech/sources/system-design-codex.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [interface](<https://devfeed.tech/topics/interface.md>), [CRUD](<https://devfeed.tech/topics/crud.md>), [GraphQL](<https://devfeed.tech/topics/graphql.md>), [gRPC](<https://devfeed.tech/topics/grpc.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [JSON](<https://devfeed.tech/topics/json.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [crud](<https://devfeed.tech/tags/crud.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [http](<https://devfeed.tech/tags/http.md>), [interface](<https://devfeed.tech/tags/interface.md>), [json](<https://devfeed.tech/tags/json.md>), [rest](<https://devfeed.tech/tags/rest.md>), [rpc](<https://devfeed.tech/tags/rpc.md>)

### AI overview

A tutorial on API design covering interface contracts, resource and endpoint naming, request and response formats, API paradigms, and modeling relationships between entities.

### Source excerpt

Key considerations to keep in mind

## OpenAPI, ORM, SVG and Lottie

DevFeed: [OpenAPI, ORM, SVG and Lottie](<https://devfeed.tech/articles/openapi-orm-svg-and-lottie-19231.md>)

Original publisher: [Read original article](<https://www.codenameone.com/blog/build-time-codegen/>)

Author: Shai Almog

Published: 2026-06-01T00:00:00Z

Content type: release

Language: en

Sources: [CodeName One](<https://devfeed.tech/sources/codename-one.md>)

Topics: [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [Code generation](<https://devfeed.tech/topics/code-generation.md>), [SQLite](<https://devfeed.tech/topics/sqlite.md>), [Object-relational mapping](<https://devfeed.tech/topics/orm.md>), [JSON](<https://devfeed.tech/topics/json.md>), [XML](<https://devfeed.tech/topics/xml.md>), [SVG](<https://devfeed.tech/topics/svg.md>), [ASP.NET Core](<https://devfeed.tech/topics/asp-net-core.md>), [FastAPI](<https://devfeed.tech/topics/fastapi.md>), [Nest](<https://devfeed.tech/topics/nestjs.md>)

Tags: [build](<https://devfeed.tech/tags/build.md>), [fastapi](<https://devfeed.tech/tags/fastapi.md>), [http](<https://devfeed.tech/tags/http.md>), [java](<https://devfeed.tech/tags/java.md>), [json](<https://devfeed.tech/tags/json.md>), [lottie](<https://devfeed.tech/tags/lottie.md>), [maven-plugin](<https://devfeed.tech/tags/maven-plugin.md>), [net](<https://devfeed.tech/tags/net.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [orm](<https://devfeed.tech/tags/orm.md>), [rest](<https://devfeed.tech/tags/rest.md>), [spring](<https://devfeed.tech/tags/spring.md>), [svg](<https://devfeed.tech/tags/svg.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

A Codename One release follow-up describes a shared build-time code generation pipeline for OpenAPI client generation, a SQLite ORM, JSON and XML mappers, SVG and Lottie transcoders, and a declarative router. The pipeline emits typed Java from annotations or declarative source files without reflection.

### Source excerpt

An OpenAPI client generator, a JPA-shaped SQLite ORM, JAXB-shaped JSON / XML mappers, build-time SVG / Lottie transcoders, and a declarative router with deep links. All on the same build-time codegen pipeline.

## From RSS to Atom

DevFeed: [From RSS to Atom](<https://devfeed.tech/articles/from-rss-to-atom-37668.md>)

Original publisher: [Read original article](<https://susam.net/from-rss-to-atom.html>)

Published: 2026-05-04T00:00:00Z

Content type: opinion

Language: en

Sources: [Susam Pal](<https://devfeed.tech/sources/susam-pal.md>)

Topics: [Atom Feed](<https://devfeed.tech/topics/atom-feed.md>), [RSS Feed](<https://devfeed.tech/topics/rss-feed.md>), [Lisp](<https://devfeed.tech/topics/lisp.md>), [Git](<https://devfeed.tech/topics/git.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [git](<https://devfeed.tech/tags/git.md>), [git-commit](<https://devfeed.tech/tags/git-commit.md>), [lisp](<https://devfeed.tech/tags/lisp.md>), [rss](<https://devfeed.tech/tags/rss.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

The author describes switching a personal website from RSS feeds to Atom feeds in 2026. The change was implemented in Common Lisp, took about an hour, and included replacing RSS item identifiers with UUID-based Atom entry identifiers and updating feed templates.

### Source excerpt

Yesterday, I switched my website from RSS feeds to Atom feeds. In case you are wondering whether you have somehow landed on an ancient post from 2010, no, you have not. Yes, this is the year 2026, and I have finally switched from RSS feeds to Atom feeds. Yes, I am fifteen, or perhaps twenty, years too late. Contents Impulse Coding Atom Entries Temporary Workaround Does It Matter? References Impulse Coding I have always wanted to do this but could never make the time for it. Finally, it happened while I was giving my brain some rest from my ongoing algebraic graph theory studies. That's when I felt like spending a little time on my website and doing a little Lisp to change the feeds from RSS to Atom. I suppose this was impulse coding, a bit like impulse buying, except that I ended up with an Atom feed instead of a new book. I find it quite surprising that when I have plenty of time, it usually does not occur to me to do these things, but when I am too busy and really short of time, these little ideas possess me during the short breaks I take. My personal website is one of my passion projects. Common Lisp is one of my favourite programming languages. So any time spent on this passion project using my favourite programming language is a very relaxing experience for me. It serves as an ideal break between intense study sessions. It took about an hour to implement the changes needed to make the switch from RSS to Atom. In the end, I could go back to my studies reinvigorated. In case you are curious, here is the Git commit where I implemented the change from RSS to Atom: 596e1dd. As you might notice, a large portion of the change consists of replacing the key attribute in each post with the uuid attribute. The key attribute value was used as the value of the <guid> element in the RSS feeds. While an arbitrary short string could serve as the <guid> element for the items in an RSS feed, the <id> element of the entries in an Atom feed needs to be a URI. It turns out UUID URN

## How The New York Times Games Team Delivered Accessible, Cross-Platform Dark Mode

DevFeed: [How The New York Times Games Team Delivered Accessible, Cross-Platform Dark Mode](<https://devfeed.tech/articles/how-the-new-york-times-games-team-delivered-accessible-cross-platform-dark-mode-39153.md>)

Original publisher: [Read original article](<https://open.nytimes.com/implementing-dark-mode-in-the-games-app-be7241ddb7ba?source=rss----51e1d1745b32---4>)

Author: The NYT Open Team

Published: 2026-04-16T15:35:45Z

Content type: article

Language: en

Sources: [New York Times](<https://devfeed.tech/sources/new-york-times.md>)

Topics: [Dark Mode](<https://devfeed.tech/topics/dark-mode.md>), [Mobile](<https://devfeed.tech/topics/mobile.md>), [Android](<https://devfeed.tech/topics/android.md>), [iOS](<https://devfeed.tech/topics/ios.md>), [Jetpack Compose](<https://devfeed.tech/topics/jetpack-compose.md>), [ui](<https://devfeed.tech/topics/ui.md>), [Design system](<https://devfeed.tech/topics/design-system.md>), [XML](<https://devfeed.tech/topics/xml.md>), [pull-requests](<https://devfeed.tech/topics/pull-requests.md>), [SwiftUI](<https://devfeed.tech/topics/swiftui.md>), [Objective-C](<https://devfeed.tech/topics/objective-c.md>)

Tags: [accessible](<https://devfeed.tech/tags/accessible.md>), [android](<https://devfeed.tech/tags/android.md>), [collaboration](<https://devfeed.tech/tags/collaboration.md>), [cross-platform](<https://devfeed.tech/tags/cross-platform.md>), [dark-mode](<https://devfeed.tech/tags/dark-mode.md>), [design](<https://devfeed.tech/tags/design.md>), [design-system](<https://devfeed.tech/tags/design-system.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [ios](<https://devfeed.tech/tags/ios.md>), [jetpack-compose](<https://devfeed.tech/tags/jetpack-compose.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [swiftui](<https://devfeed.tech/tags/swiftui.md>)

### AI overview

The New York Times Games team describes implementing accessible, brand-consistent dark mode across its mobile app. The work coordinated design and engineering across Android and iOS, including XML and Jetpack Compose screens, legacy and modern interfaces, shared assets, external libraries, and testing.

### Source excerpt

Bringing accessible, brand-consistent dark mode to life in The New York Times Games app through cross-platform design and engineering collaboration.Illustration by Allie Sullberg By Vanessa Johnson, Daniel Falokun, Michael Ingber and Oleksandr Zabiiako The Games Mobile App introduced dark mode back in October. This seamless implementation was a collaborative effort, requiring careful planning and management of design, cross-platform coordination, and engineering work across both legacy and modern user interface systems. The process to implement dark mode across the app included consideration on the visuals, colors, and icons that are mode specific to maintain legibility and brand consistency. The New York Times Games team is excited to have delivered this feature before the end of 2025, and thrilled to be able to roll out a feature that continues to make our app accessible for all. Development Work on Mobile On the development side, the mobile and web engineers synchronized assets which were colors, fonts, and images to ensure that hybrid screens showed the correct styles and colors. This was possible since our design system across mobile was constructed in a way that encouraged consistency and scalability across platforms. With clear and easy to follow designs supported by our internal design system, Android and iOS could ensure consistency on both platforms. Screens in dark mode From an Android perspective, it required separate approaches for XML (Extensive Markup Language) based screens which use an imperative, hierarchical approach and Jetpack Compose screens that use a more modern declarative approach. XML and Jetpack Compose are different ways the UI can be constructed. To ensure dark mode compatibility, all features were revisited to make sure they were adapted, especially the additions that were being worked on during the dark mode project. Another aspect of this development was updating external libraries that required making pull requests, creating a versi

## Python 3.12.13, 3.11.15 and 3.10.20 are now available!

DevFeed: [Python 3.12.13, 3.11.15 and 3.10.20 are now available!](<https://devfeed.tech/articles/python-3-12-13-3-11-15-and-3-10-20-are-now-available-2393.md>)

Original publisher: [Read original article](<https://blog.python.org/2026/03/python-31213-31115-31020/>)

Author: Thomas Wouters

Published: 2026-03-03T00:00:00Z

Content type: release

Language: en

Sources: [Python Insider](<https://devfeed.tech/sources/python-insider.md>)

Topics: [Python](<https://devfeed.tech/topics/python.md>), [releases](<https://devfeed.tech/topics/releases.md>), [Security](<https://devfeed.tech/topics/security.md>), [Python 3.10](<https://devfeed.tech/topics/python-3-10.md>), [XML](<https://devfeed.tech/topics/xml.md>), [Parser](<https://devfeed.tech/topics/parser.md>), [HTML](<https://devfeed.tech/topics/html.md>), [SSL](<https://devfeed.tech/topics/ssl.md>)

Tags: [html](<https://devfeed.tech/tags/html.md>), [http](<https://devfeed.tech/tags/http.md>), [memory](<https://devfeed.tech/tags/memory.md>), [memory-safety](<https://devfeed.tech/tags/memory-safety.md>), [python](<https://devfeed.tech/tags/python.md>), [python-3-10](<https://devfeed.tech/tags/python-3-10.md>), [releases](<https://devfeed.tech/tags/releases.md>), [security](<https://devfeed.tech/tags/security.md>), [ssl](<https://devfeed.tech/tags/ssl.md>)

### AI overview

Python 3.12.13, 3.11.15, and 3.10.20 are security-only source releases addressing vulnerabilities and hardening email, HTTP, XML, HTML, denial-of-service, and SSL handling.

### Source excerpt

[Python Releases For Your Security!](https://discuss.python.org/t/python-3-12-13-3-11-15-and-3-10-20-are-now-available/106363) New security releases for 3.10, 3.11 and 3.12 are now available.

## Moved my blog to \[blog.wagemakers.be\](https://blog.wagemakers.be)

DevFeed: [Moved my blog to \[blog.wagemakers.be\](https://blog.wagemakers.be)](<https://devfeed.tech/articles/moved-my-blog-to-blog-wagemakers-be-https-blog-wagemakers-be-39540.md>)

Original publisher: [Read original article](<https://blog.wagemakers.be/blog/2026/01/26/blog-wagemakers-be/>)

Author: Staf Wagemakers

Published: 2026-01-26T17:26:00Z

Content type: tutorial

Language: en

Sources: [stafwag Blog](<https://devfeed.tech/sources/stafwag-blog.md>)

Topics: [migration](<https://devfeed.tech/topics/migration.md>), [hosting](<https://devfeed.tech/topics/hosting.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Security](<https://devfeed.tech/topics/security.md>), [RSS Feed](<https://devfeed.tech/topics/rss-feed.md>), [Hugo](<https://devfeed.tech/topics/hugo.md>), [Atom](<https://devfeed.tech/topics/atom.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [atom](<https://devfeed.tech/tags/atom.md>), [blog](<https://devfeed.tech/tags/blog.md>), [disquss](<https://devfeed.tech/tags/disquss.md>), [github](<https://devfeed.tech/tags/github.md>), [hosting](<https://devfeed.tech/tags/hosting.md>), [html](<https://devfeed.tech/tags/html.md>), [https](<https://devfeed.tech/tags/https.md>), [hugo](<https://devfeed.tech/tags/hugo.md>), [jekell](<https://devfeed.tech/tags/jekell.md>), [migration](<https://devfeed.tech/tags/migration.md>), [rss](<https://devfeed.tech/tags/rss.md>), [security](<https://devfeed.tech/tags/security.md>), [security-privacy](<https://devfeed.tech/tags/security-privacy.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

The author moved the blog from GitHub to self-hosted hosting and documents the migration issues encountered. The article covers HTML redirects, updating hardcoded links, Disqus comment reindexing, and difficulties redirecting RSS feeds when moving from Octopress to Jekyll.

### Source excerpt

If you follow my blog posts with an RSS reader, update the rss feed to: https://blog.wagemakers.be/atom.xml ...If you want to continue to follow me off-course ;-) I moved my blog from GitHub to my own hosting ( powered by Procolix ). Procolix sponsored my hosting for 20 years, till I decided to start my company Mask27.dev. One reason is that Microsoft seems to like to put "copilot everywhere", including on repositories hosted on github. While I don't dislike AI ( artificial intelligence ), LLM ( Large Language Models ) are a nice piece of technology. The security, privacy, and other issues are overlooked or even just ignored. The migration was a bit more complicated as usual, as nothing "is easy" ;-) You'll find the pitfalls of moving my blog below as they might be useful for somebody else ( including the future me ).

## \[Pentesting\] ONVIF (CCTV cameras) auth

DevFeed: [\[Pentesting\] ONVIF (CCTV cameras) auth](<https://devfeed.tech/articles/pentesting-onvif-cctv-cameras-auth-20544.md>)

Original publisher: [Read original article](<https://yurichev.com/blog/ONVIF/>)

Published: 2025-11-27T23:00:00Z

Content type: tutorial

Language: en

Sources: [Dennis Yurichev](<https://devfeed.tech/sources/dennis-yurichev.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [XML](<https://devfeed.tech/topics/xml.md>), [Python](<https://devfeed.tech/topics/python.md>)

Tags: [auth](<https://devfeed.tech/tags/auth.md>), [camera](<https://devfeed.tech/tags/camera.md>), [cameras](<https://devfeed.tech/tags/cameras.md>), [password](<https://devfeed.tech/tags/password.md>), [python](<https://devfeed.tech/tags/python.md>), [tcp](<https://devfeed.tech/tags/tcp.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

This article examines ONVIF authentication for CCTV cameras over TCP. It explains the username, password digest, nonce, and date fields, gives the digest calculation, and describes using Hashcat to crack a known password digest.

### Source excerpt

[Pentesting] ONVIF (CCTV cameras) auth

## XML Modelling in OpenAPI 3.2: A Quiet but Important Upgrade for Enterprise Teams

DevFeed: [XML Modelling in OpenAPI 3.2: A Quiet but Important Upgrade for Enterprise Teams](<https://devfeed.tech/articles/xml-modelling-in-openapi-3-2-a-quiet-but-important-upgrade-for-enterprise-teams-30964.md>)

Original publisher: [Read original article](<https://developerhub.io/blog/xml-modelling-in-openapi-3-2-a-quiet-but-important-upgrade-for-enterprise-teams/>)

Author: Zaid Daba'een

Published: 2025-11-14T14:54:07Z

Content type: tutorial

Language: en

Sources: [DeveloperHub.io](<https://devfeed.tech/sources/developerhub-io.md>)

Topics: [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [XML](<https://devfeed.tech/topics/xml.md>), [upgrade](<https://devfeed.tech/topics/upgrade.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [api-design](<https://devfeed.tech/tags/api-design.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

OpenAPI 3.2 expands XML modelling with clearer support for namespaces, attributes, mixed content, and precisely named nested wrappers. The article explains how these capabilities address limitations in OpenAPI 3.1 and reduce reliance on parallel XSDs, proprietary extensions, and prose documentation.

### Source excerpt

OpenAPI 3.2 modernises XML support with richer modelling, proper attribute handling, and nested structures. It removes old workarounds and gives enterprise teams clearer, more accurate ways to define their XML based APIs.

## Changes in ipSpace.net RSS Feeds

DevFeed: [Changes in ipSpace.net RSS Feeds](<https://devfeed.tech/articles/changes-in-ipspace-net-rss-feeds-11255.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/10/changes-rss-feeds/>)

Published: 2025-10-08T04:40:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [RSS Feed](<https://devfeed.tech/topics/rss-feed.md>), [Atom](<https://devfeed.tech/topics/atom.md>), [Atom Feed](<https://devfeed.tech/topics/atom-feed.md>), [Hugo](<https://devfeed.tech/topics/hugo.md>), [XML](<https://devfeed.tech/topics/xml.md>), [HTML](<https://devfeed.tech/topics/html.md>)

Tags: [hugo](<https://devfeed.tech/tags/hugo.md>), [rss](<https://devfeed.tech/tags/rss.md>), [update](<https://devfeed.tech/tags/update.md>), [web](<https://devfeed.tech/tags/web.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

The author describes replacing the ipSpace.net RSS and Atom feed generation system with static Hugo-generated feeds, adding redirects for older URLs, and discontinuing the free-content feed. The changes followed a Feedburner failure that prevented Apple Podcasts from discovering a new episode. The article also discusses feed formatting issues involving iTunes tags, whitespace trimming, HTML escaping, content truncation, and conversion of HTML to plain text.

### Source excerpt

TL&DR: You shouldn't see any immediate impact of this change, but I'll eventually clean up old stuff, so you might want to check the URLs if you use RSS/Atom feeds to get the list of ipSpace.net blog posts or podcast episodes. The (hopefully) final URLs are listed on this page. Executive Summary: I cleaned up the whole ipSpace.net RSS/Atom feeds system. The script that generated the content for various feeds has been replaced with static Hugo-generated RSS/Atom feeds. I added redirects for all the old stuff I could find (including ioshints.blogspot.com), but I could have missed something. The only defunct feed is the free content feed (which hasn't changed in a while, anyway), as it required scanning the documents database. You can use this page to find the (ever-increasing) free content. And now for the real story ;) Read more ...

## OpenAPI 3.2 adds OAuth device flow, structured tags, QUERY, streaming, and XML modeling

DevFeed: [OpenAPI 3.2 adds OAuth device flow, structured tags, QUERY, streaming, and XML modeling](<https://devfeed.tech/articles/what-s-changing-in-openapi-3-2-and-why-you-should-care-30963.md>)

Original publisher: [Read original article](<https://developerhub.io/blog/whats-changing-in-openapi-3-2-and-why-you-should-care/>)

Author: Zaid Daba'een

Published: 2025-10-05T12:12:40Z

Content type: article

Language: en

Sources: [DeveloperHub.io](<https://devfeed.tech/sources/developerhub-io.md>)

Topics: [OpenAPI Specification](<https://devfeed.tech/topics/openapi.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Streaming](<https://devfeed.tech/topics/streaming.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [deprecated](<https://devfeed.tech/tags/deprecated.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [event-streaming](<https://devfeed.tech/tags/event-streaming.md>), [extension](<https://devfeed.tech/tags/extension.md>), [http](<https://devfeed.tech/tags/http.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [openapi](<https://devfeed.tech/tags/openapi.md>), [schema](<https://devfeed.tech/tags/schema.md>), [streaming](<https://devfeed.tech/tags/streaming.md>)

### AI overview

The article reviews proposed OpenAPI 3.2 changes, including OAuth device flow support, hierarchical tags, the QUERY method, clearer multipart definitions, streaming API support, and improved XML modeling. It describes the release as incremental and compatible with OpenAPI 3.1.

### Source excerpt

See what's new in OpenAPI v3.2. Better structure, better auth support, better file and stream handling - no breaking changes.

## Compose Unstyled v1.40: Android XML themes

DevFeed: [Compose Unstyled v1.40: Android XML themes](<https://devfeed.tech/articles/compose-unstyled-v1-40-android-xml-themes-28446.md>)

Original publisher: [Read original article](<https://composables.com/blog/compose-unstyled-1.40.0>)

Author: Alex Styl

Published: 2025-08-14T00:00:00Z

Content type: release

Language: en

Sources: [Composables - Concise, no-fluff video tutorials for Android developers](<https://devfeed.tech/sources/composables-concise-no-fluff-video-tutorials-for-android-developers.md>)

Topics: [Compose](<https://devfeed.tech/topics/compose.md>), [Jetpack Compose](<https://devfeed.tech/topics/jetpack-compose.md>), [migration](<https://devfeed.tech/topics/migration.md>), [Android](<https://devfeed.tech/topics/android.md>), [XML](<https://devfeed.tech/topics/xml.md>), [material-components](<https://devfeed.tech/topics/material-components.md>)

Tags: [adapter](<https://devfeed.tech/tags/adapter.md>), [android](<https://devfeed.tech/tags/android.md>), [api](<https://devfeed.tech/tags/api.md>), [compose](<https://devfeed.tech/tags/compose.md>), [jetpack](<https://devfeed.tech/tags/jetpack.md>), [jetpack-compose](<https://devfeed.tech/tags/jetpack-compose.md>), [material-components](<https://devfeed.tech/tags/material-components.md>), [migration](<https://devfeed.tech/tags/migration.md>), [performance](<https://devfeed.tech/tags/performance.md>), [v1](<https://devfeed.tech/tags/v1.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

Compose Unstyled v1.40.0 introduces the resolveTheme API, which lets Jetpack Compose resolve selected values from existing Android XML themes during a gradual migration from Views. The approach avoids maintaining duplicate theme sources, but each resolution has a measurable performance cost and is intended to be temporary.

### Source excerpt

v1.40.0 introduces a new resolveThemeX() API to make the migration to Jetpack Compose simpler.

## Announcing Microsoft.PowerShell.PlatyPS 1.0.0

DevFeed: [Announcing Microsoft.PowerShell.PlatyPS 1.0.0](<https://devfeed.tech/articles/announcing-microsoft-powershell-platyps-1-0-0-2976.md>)

Original publisher: [Read original article](<https://devblogs.microsoft.com/powershell/announcing-platyps-100/>)

Author: Jason Helmick, Sean Wheeler

Published: 2025-07-24T21:35:14Z

Content type: release

Language: en

Sources: [PowerShell Team](<https://devfeed.tech/sources/powershell-team.md>)

Topics: [PowerShell PlatyPS](<https://devfeed.tech/topics/powershell-platyps.md>), [PowerShell](<https://devfeed.tech/topics/powershell.md>), [Markdown](<https://devfeed.tech/topics/markdown.md>), [PowerShell Release](<https://devfeed.tech/topics/powershell-release.md>), [Documentation](<https://devfeed.tech/topics/documentation.md>), [XML](<https://devfeed.tech/topics/xml.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [documentation](<https://devfeed.tech/tags/documentation.md>), [github](<https://devfeed.tech/tags/github.md>), [markdown](<https://devfeed.tech/tags/markdown.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [net](<https://devfeed.tech/tags/net.md>), [powershell](<https://devfeed.tech/tags/powershell.md>), [powershell-platyps](<https://devfeed.tech/tags/powershell-platyps.md>), [release](<https://devfeed.tech/tags/release.md>)

### AI overview

Microsoft announces the general availability of Microsoft.PowerShell.PlatyPS 1.0.0, a rewritten tool for authoring PowerShell help in Markdown and converting it to MAML XML. The release adds new cmdlets, improved help descriptions, an object model, cmdlet chaining, higher performance, and support for Windows, Linux, and macOS.

### Source excerpt

We are pleased to announce the general availability of Microsoft.PowerShell.PlatyPS 1.0.0, a tool to build PowerShell help files. The post Announcing Microsoft.PowerShell.PlatyPS 1.0.0 appeared first on PowerShell Team.

## Where Are the NETCONF/YANG Tools?

DevFeed: [Where Are the NETCONF/YANG Tools?](<https://devfeed.tech/articles/where-are-the-netconf-yang-tools-11201.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/06/netconf-tooling/>)

Published: 2025-06-04T05:38:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [NETCONF](<https://devfeed.tech/topics/netconf.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [Network](<https://devfeed.tech/topics/network.md>), [Automation](<https://devfeed.tech/topics/automation.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [netconf](<https://devfeed.tech/tags/netconf.md>), [network](<https://devfeed.tech/tags/network.md>), [network-automation](<https://devfeed.tech/tags/network-automation.md>), [tooling](<https://devfeed.tech/tags/tooling.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

The article examines difficulties finding reliable, current tooling for NETCONF/YANG network-device configuration and model inspection. It discusses ncclient's incomplete documentation, abandoned or outdated YANG tools, installation problems on modern Python versions, and the challenges of using Docker-based tooling. It mentions pyang as a possible tool and asks readers to recommend maintained alternatives.

### Source excerpt

Jo attempted to follow the vendor Kool-Aid recommendations and use NETCONF/YANG to configure network devices. Here's what he found (slightly edited): IMHO, the whole NETCONF ecosystem primarily suffers from a tooling problem. Or I haven't found the right tools yet. ncclient is (as you mentioned somewhere else) an underdocumented mess. And that undocumented part is not even up to date. The commit hash at the bottom of the docs page is from 2020... I am amazed how so many people got it working well enough to depend on it in their applications. Read more ...

## Repost: On the Advantages of XML

DevFeed: [Repost: On the Advantages of XML](<https://devfeed.tech/articles/repost-on-the-advantages-of-xml-11188.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/05/repost-xml-advantages/>)

Published: 2025-05-26T06:07:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [XML](<https://devfeed.tech/topics/xml.md>), [JSON](<https://devfeed.tech/topics/json.md>), [NETCONF](<https://devfeed.tech/topics/netconf.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Python](<https://devfeed.tech/topics/python.md>), [ChatGPT](<https://devfeed.tech/topics/chatgpt.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [automation](<https://devfeed.tech/tags/automation.md>), [chatgpt](<https://devfeed.tech/tags/chatgpt.md>), [json](<https://devfeed.tech/tags/json.md>), [netconf](<https://devfeed.tech/tags/netconf.md>), [python](<https://devfeed.tech/tags/python.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

This reposted discussion examines XML and JSON for network automation. It argues that XML's semantic structure can support reliable, maintainable automation despite XML's size and complexity, while describing mixed results from ChatGPT-generated XPath and Python code, including failures in a fuller ncclient solution.

### Source excerpt

Continuing the discussion started by my Breaking APIs or Data Models Is a Cardinal Sin and Screen Scraping in 2025 blog posts, Dr. Tony Przygienda left another thoughtful comment worth reposting as a publicly visible blog post: Having read your newest rant around my rant ;-} I can attest that you hit the nail on the very head in basically all you say: XML output big? yeah. JSON squishy syntax? yeah. SSH prioritization? You didn't live it until you had a customer where a runaway python script generated 800+ XML netconf sessions pumping data ;-) Read more ...

## From ePA 2.6 to 3.0 : Healthcare Data Integration for Electronic Patient Records at HelloBetter

DevFeed: [From ePA 2.6 to 3.0 : Healthcare Data Integration for Electronic Patient Records at HelloBetter](<https://devfeed.tech/articles/from-epa-2-6-to-3-0-healthcare-data-integration-for-electronic-patient-records-at-hellobetter-26533.md>)

Original publisher: [Read original article](<https://annajmcdougall.medium.com/from-epa-2-6-to-3-0-healthcare-data-integration-for-electronic-patient-records-at-hellobetter-f60a7e63c0f5?source=rss-51f15275ef3a------2>)

Author: Anna J McDougall

Published: 2025-05-20T09:27:30Z

Content type: tutorial

Language: en

Sources: [Anna J McDougall](<https://devfeed.tech/sources/anna-j-mcdougall.md>)

Topics: [data](<https://devfeed.tech/topics/data.md>), [implementation](<https://devfeed.tech/topics/implementation.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [XML](<https://devfeed.tech/topics/xml.md>), [pdf](<https://devfeed.tech/topics/pdf.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [backend](<https://devfeed.tech/tags/backend.md>), [data](<https://devfeed.tech/tags/data.md>), [electronic-patient-record](<https://devfeed.tech/tags/electronic-patient-record.md>), [engineering-management](<https://devfeed.tech/tags/engineering-management.md>), [export](<https://devfeed.tech/tags/export.md>), [frontend](<https://devfeed.tech/tags/frontend.md>), [germany](<https://devfeed.tech/tags/germany.md>), [healthcare](<https://devfeed.tech/tags/healthcare.md>), [healthtech](<https://devfeed.tech/tags/healthtech.md>), [integration](<https://devfeed.tech/tags/integration.md>), [pdf](<https://devfeed.tech/tags/pdf.md>), [pipeline](<https://devfeed.tech/tags/pipeline.md>), [platform](<https://devfeed.tech/tags/platform.md>), [product](<https://devfeed.tech/tags/product.md>), [project](<https://devfeed.tech/tags/project.md>), [software-architecture](<https://devfeed.tech/tags/software-architecture.md>), [technical](<https://devfeed.tech/tags/technical.md>), [terminal](<https://devfeed.tech/tags/terminal.md>)

### AI overview

This technical post describes HelloBetter's implementation journey from Germany's ePA 2.6 to ePA 3.0. It covers HealthID login, ePA data export, PDF and XML document writing, and the frontend and backend integrations used to connect therapeutic data across systems. The implementation was completed pending BfArm approval.

### Source excerpt

From ePA 2.6 to 3.0: A Technical Journey in Healthcare Data Integration for Electronic Patient Records...so far Germany has a bad reputation for digitalisation, so the government's push to implement an electronic patient record ("elektronische Patientenakte" or ePA) for its citizens and residents is a step in the right direction. As an official digital health application ("digitale Gesundheitsapplikation" or "DiGA"), we are obligated to shift to the ePA 3.0 implementation. The government rollout has been plagued with technical difficulties and delays, but we're now at a point where we have completed our implementation successfully, pending BfArm approval. In this post, I want to cover the exact steps we and had to take to achieve this. I want to thank Senior Product Manager Tanja Lembcke and Senior Backend Engineer Chaythanya Sivakumar for their contributions to this piece. The Challenge: Connecting Patient Data Across Systems The electronic patient record (ePA) and HealthID integration project had a clear mission: we wanted to give our patients the ability to log into the HelloBetter platform using their HealthID (which they access through their insurance company) and export their HelloBetter data into their ePA. A successful implementation would mean that both doctors and patients can electronically access therapeutic data whenever they need it. To make this happen for the patient data at HelloBetter, we partnered with two key players: RISE for ePA system access and Azuma for HealthID system access. Our journey began in 2024 when our backend team laid the groundwork for ePA 2.6, setting up the pipeline and data export in our staging environment. We successfully implemented both PDF and XML document writing capabilities, along with the frontend and backend integrations for HealthID login. How It All Works: The Architectural SideHealthID Authentication The first piece of the puzzle is connecting to and authorising the user's HealthID. This part of the system has remai

## Screen Scraping in 2025

DevFeed: [Screen Scraping in 2025](<https://devfeed.tech/articles/screen-scraping-in-2025-11190.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/05/screen-scraping-2025/>)

Published: 2025-05-07T09:32:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Structured-data](<https://devfeed.tech/topics/structured-data.md>), [JSON](<https://devfeed.tech/topics/json.md>), [XML](<https://devfeed.tech/topics/xml.md>), [Parsing](<https://devfeed.tech/topics/parsing.md>), [Python](<https://devfeed.tech/topics/python.md>)

Tags: [automation](<https://devfeed.tech/tags/automation.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [code](<https://devfeed.tech/tags/code.md>), [data](<https://devfeed.tech/tags/data.md>), [json](<https://devfeed.tech/tags/json.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [python](<https://devfeed.tech/tags/python.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

The article examines why screen scraping remains necessary for network devices that lack reliable JSON or XML output. It compares screen-scraped text with structured data, noting that JSON and XML can be larger and that manually generated or legacy structured output may be invalid or unavailable. It also argues that XML is generally harder to process than JSON, especially for large objects and data involving namespaces.

### Source excerpt

Dr. Tony Przygienda left a very valid (off-topic) comment to my Breaking APIs or Data Models Is a Cardinal Sin blog post: If, on the other hand, the customers would not camp for literally tens of years on regex scripts scraping screens, lots of stuff could progress much faster. He's right, particularly from Juniper's perspective; they were the first vendor to use a data-driven approach to show commands. Unfortunately, we're still not living in a perfect world: Read more ...

## Inner Loop Agents

DevFeed: [Inner Loop Agents](<https://devfeed.tech/articles/inner-loop-agents-33461.md>)

Original publisher: [Read original article](<https://timkellogg.me/blog/2025/04/19/inner-loops>)

Published: 2025-04-19T00:00:00Z

Content type: opinion

Language: en

Sources: [Tim Kellogg](<https://devfeed.tech/sources/tim-kellogg.md>)

Topics: [Large Language Model](<https://devfeed.tech/topics/llm.md>), [Tool](<https://devfeed.tech/topics/tool.md>), [Parsing](<https://devfeed.tech/topics/parsing.md>), [Ollama](<https://devfeed.tech/topics/ollama.md>), [vllm](<https://devfeed.tech/topics/vllm.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Reinforcement learning](<https://devfeed.tech/topics/reinforcement-learning.md>), [XML](<https://devfeed.tech/topics/xml.md>)

Tags: [agents](<https://devfeed.tech/tags/agents.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [api](<https://devfeed.tech/tags/api.md>), [json](<https://devfeed.tech/tags/json.md>), [llm](<https://devfeed.tech/tags/llm.md>), [ollama](<https://devfeed.tech/tags/ollama.md>), [openai](<https://devfeed.tech/tags/openai.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [reinforcement-learning](<https://devfeed.tech/tags/reinforcement-learning.md>), [tools](<https://devfeed.tech/tags/tools.md>), [vllm](<https://devfeed.tech/tags/vllm.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

This article explains "inner loop agents," a design in which an LLM can parse and execute tool calls within the model-serving loop instead of returning control to a client. It discusses how software such as Ollama and vLLM handles model-specific tool-call formats and suggests that concurrent tool use during generation is a key motivation.

### Source excerpt

What if an LLM could use tools directly? In this post I discuss a potentially divergent view of agents, where agents are less like systems and more like LLMs specially trained to solve problems with a specific set of tools.

## SAML roulette: the hacker always wins

DevFeed: [SAML roulette: the hacker always wins](<https://devfeed.tech/articles/saml-roulette-the-hacker-always-wins-7696.md>)

Original publisher: [Read original article](<https://portswigger.net/research/saml-roulette-the-hacker-always-wins>)

Author: Gareth Heyes

Published: 2025-03-18T14:55:43Z

Content type: article

Language: en

Sources: [PortSwigger Research](<https://devfeed.tech/sources/portswigger-research.md>)

Topics: [GitLab](<https://devfeed.tech/topics/gitlab.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [XML](<https://devfeed.tech/topics/xml.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Ruby](<https://devfeed.tech/topics/ruby.md>), [Library](<https://devfeed.tech/topics/library.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [github](<https://devfeed.tech/tags/github.md>), [gitlab](<https://devfeed.tech/tags/gitlab.md>), [library](<https://devfeed.tech/tags/library.md>), [research](<https://devfeed.tech/tags/research.md>), [ruby](<https://devfeed.tech/tags/ruby.md>), [saml](<https://devfeed.tech/tags/saml.md>), [security](<https://devfeed.tech/tags/security.md>), [testing](<https://devfeed.tech/tags/testing.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [xml](<https://devfeed.tech/tags/xml.md>)

### AI overview

This security research post explains how round-trip attacks and namespace confusion in the ruby-saml library can be chained to bypass signature verification and obtain unauthenticated administrative access to GitLab Enterprise. It describes parser inconsistencies involving REXML and Nokogiri, XML mutations using comments and CDATA, and a testbed for evaluating SAML libraries. The supplied article text ends during the discussion of DOCTYPE analysis.

### Source excerpt

Introduction In this post, we'll show precisely how to chain round-trip attacks and namespace confusion to achieve unauthenticated admin access on GitLab Enterprise by exploiting the ruby-saml library

## MDN 2024 content projects

DevFeed: [MDN 2024 content projects](<https://devfeed.tech/articles/mdn-2024-content-projects-4093.md>)

Original publisher: [Read original article](<https://developer.mozilla.org/en-US/blog/mdn-2024-content-projects/>)

Author: vadim-makeev

Published: 2025-01-08T00:00:00Z

Content type: article

Language: en

Sources: [MDN Blog](<https://devfeed.tech/sources/mdn-blog.md>)

Topics: [Documentation](<https://devfeed.tech/topics/documentation.md>), [Web platform](<https://devfeed.tech/topics/web-platform.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [XML](<https://devfeed.tech/topics/xml.md>), [Accessibility](<https://devfeed.tech/topics/accessibility.md>), [LaTeX](<https://devfeed.tech/topics/latex.md>), [math](<https://devfeed.tech/topics/math.md>), [HTML](<https://devfeed.tech/topics/html.md>), [Markdown](<https://devfeed.tech/topics/markdown.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [accessibility](<https://devfeed.tech/tags/accessibility.md>), [docs](<https://devfeed.tech/tags/docs.md>), [html](<https://devfeed.tech/tags/html.md>), [http](<https://devfeed.tech/tags/http.md>), [latex](<https://devfeed.tech/tags/latex.md>), [markdown](<https://devfeed.tech/tags/markdown.md>), [math](<https://devfeed.tech/tags/math.md>), [web-platform](<https://devfeed.tech/tags/web-platform.md>)

### AI overview

MDN Web Docs reviews its 2024 content projects, describing audits and updates to popular but outdated or incomplete material. The work focused on HTTP, MathML, and web Manifests, with particular detail on improved MathML documentation, examples, LaTeX annotations, browser compatibility data, and accessibility information.

### Source excerpt

Let's have a look at MDN Web Docs content projects in 2024, with highlights of our top picks and recommended reading, and at what's next on MDN for 2025.

[Next page](<https://devfeed.tech/topics/xml.md?cursor=WyIyMDI1LTAxLTA4VDAwOjAwOjAwKzAwOjAwIiwgImJiMGQ2ZTUwLTNjOWEtNDdkZC04YWM4LTAzM2NjODE5Y2NhZiJd>)