Anybody who writes an XML parser that enables XXE by default should be banned from ever writing code again.
Anybody who writes an XML parser that enables XXE by default should be banned from ever writing code again.