XML External Entities

The expanded XML is now malformed, so the authentication process terminates, as you would expect.
The hacker executing his attack.
The error page for a social network