XML Control — parser boundary
Review the safe XML fixture and identify the parser control that prevents external entity resolution.
DTD: disabled\nexternal entities: disabled\nresolver: local-only
Attribution: Adapted from Crate-CTF, 2024/web/XMLKontroll, under the MIT License. The GisVuln flag and fixture are new. See source details.
Self-contained training page; no original challenge server is contacted.