The XML External Entity injection