include::../summary.adoc[]

== Why is this an issue?

include::../rationale.adoc[]

include::../impact.adoc[]

// How to fix it section

include::how-to-fix-it/jsonwebtoken.adoc[]

== Resources

include::../common/resources/standards.adoc[]

ifdef::env-github,rspecator-view[]

'''
== Implementation Specification
(visible only on this page)

=== Highlighting

* Primary: where the xml parsing is done / incorrect options are used
* Secondary: where the xml option enable external entities

=== Message

This value enables external entities in XML parsing

endif::env-github,rspecator-view[]