https://csn.net4me.net/cyber_security_11215.html
XML External Entity injection in Jenkins Rundeck Plugin