https://www.immuniweb.com/blog/XXE-XML-injection.html
OWASP Top 10 in 2017: XML External Entities (XXE) Security Vulnerability Practical Overview