xml is so complex and poorly understood, even big companies like google and facebook have failed to implement xml parsing securely, see xxe attacks. If you didn

xml is so complex and poorly understood, even big companies like google and facebook have failed to implement xml parsing securely, see xxe attacks. If you didn't know it's possible to configure the xml parser insecurely you might be affected, especially if you're using java. xml specifies how to load files from disk while parsing and validation can trigger GET requests to firewalled systems. All I want to do is parsing a simple data structure.