Hacking Java XML Input via External Entity Injection

https://foojay.io/today/hacking-java-xml-input-via-external-entity-injection/