Review this Python endpoint that parses a user-uploaded XML config, with external entities already disabled.