https://en.wikipedia.org/wiki/XML_external_entity_attack would be the more relavent link.