Try to defend against XML External Entity Injection