=== Highlighting

* Primary: where the xml parsing is done / incorrect options are used
* Secondary: where the xml option enable external entities
** message: "This value enables external entities in XML parsing."

