Testing for OWASP 2017: XML External Entities