SoK: XML Parser Vulnerabilities. - Christopher Späth; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (WOOT, 2016)

DOMPurify: Client-Side Protection Against XSS and Markup Injection. - Mario Heiderich; Christopher Späth; Jörg Schwenk (ESORICS (2), 2017)

Is MathML dangerous? - Christopher Späth (Sicherheit, 2018)