If you have backend systems parsing XML, then an XXE[1] attack could trigger a DNS lookup, for example. [1]https://www.owasp.org/index.php/XML_External_Entity_

If you have backend systems parsing XML, then an XXE[1] attack could trigger a DNS lookup, for example. [1]https://www.owasp.org/index.php/XML_External_Entity_%28XXE%29_Processing https://www.owasp.org/index.php/XML_External_Entity_%28XXE%2...