> Currently, they seem to favor xml-rs which only implements a subset of XML. Which seems to be a sane decision given the XML language allows for data blow-ups

> Currently, they seem to favor xml-rs which only implements a subset of XML. Which seems to be a sane decision given the XML language allows for data blow-ups[^0]. I'm not sure what specific subset of XML `xml-rs` implements, but to me it seems insane to fully implement XML because of this. [^0]: https://en.wikipedia.org/wiki/Billion_laughs_attack https://en.wikipedia.org/wiki/Billion_laughs_attack