The XML External Entity (XXE) attack is a type of attack against an application that parses XML input.  An XXE attack typically occurs when XML