XML error reference · XV037
External entity reference blocked
The document declares an entity that points at an external resource. It was not fetched.
What causes it
An entity declared with `SYSTEM` or `PUBLIC` tells the parser to load content from a URI. Server-side, that is the XML External Entity vulnerability: a crafted document can read local files or make the server issue requests on the attacker's behalf. This tool never resolves them, and the browser's built-in parser does not either, so nothing was fetched.
See it happen
<!DOCTYPE r [<!ENTITY x SYSTEM "file:///etc/passwd">]>
<r>&x;</r><r>redacted</r>How to fix it
Remove the external entity unless you specifically intend it. If you accept XML on a server, disable external entity resolution explicitly. It is on by default in several widely used parsers, including older Java and PHP configurations.
Fix your own document
Paste your own document below. Press Sample if you want the broken example above loaded instead. Nothing you paste leaves this tab.
XML Validator
Well-formedness and schema validation. Nothing is uploaded.
Everything runs in this tab. Nothing you paste is uploaded, logged or sent anywhere. Open your network panel and check.