Your XML Parser Opened a File Because the Document Asked It To

The feature was an import. Suppliers upload a product feed as XML, and the screen shows a preview. Name. Price. Description. A tester sent a feed with four extra lines at the top. The preview came back and the description field held the contents of a configuration file from the server's disk. Nobody had written code to read that file. The parser did it, because the document asked. XML has a part most of us never use on purpose. The document type declaration. It can define entities, name