readme update and xml exploit bandaid