[NickNameNick]

If you have backend systems parsing XML, then an XXE[1] attack could trigger a DNS lookup, for example.

[1]https://www.owasp.org/index.php/XML_External_Entity_%28XXE%2...

[sarciszewski]

Ooh, that could lead to some very interesting attack vectors. :D