title: XXE vulnerabilities in Javascript
body: <p>Is it true (or at least makes sense) that one can have a XXE attack on Javascript? 
  This is, when trying to parse XML with JS, does it process external entities? But this
  parsing is executed client side, am I right? What harm can it do to a server?</p>
  
  <p>How can we prevent such attacks on Javascript XML DOM or Jquery or alike?</p>
  
  <p>Thank you!
  Cheers</p>