In the latest edition of "This One Time on a Pen Test," we discuss a classic web application engagement involving XML.