https://vulert.com/blog/preventing-xml-external-entity-attacks/