# XML LLSD security regression corpus

These inputs exercise the XML LLSD parser's entity boundary. DTD declarations,
external entities, and undeclared named entities must be rejected without file
or network access and without entity expansion. The structured-data unit tests
load every fixture directly. `malformed_nesting.xml` additionally covers
crossed container end tags, while `truncated_scalar.xml` guards against parser
loops when a scalar reaches end-of-input without a closing tag.