That's a nasty little xml document. Interesting how any kind of simple macro expansion system is wide open to this kind of attack.

My guess is that to distinguish between 'legitimate' cases and 'attacks' is on par with solving the halting problem.