xml is so complex and poorly understood, even big companies like google and facebook have failed to implement xml parsing securely, see xxe attacks. If you didn&#x27;t know it&#x27;s possible to configure the xml parser insecurely you might be affected, especially if you&#x27;re using java. xml specifies how to load files from disk while parsing and validation can trigger GET requests to firewalled systems.<p>All I want to do is parsing a simple data structure.