XML Parsing Error: not well-formed Location: http://www.example.com/return_xml Line Number 30, Column 1: var y= (a && a.b ...
& symbol breaks the XML parser. What type of attacks could be executed from this (if any)?
My first thought was XXE but I believe browsers disable that by default. Does this sound like a non-vulnerability?