Here is the actual OWASP document:
https://owasp.org/www-project-top-ten/2017/A4_2017-XML_External_Entities_(XXE)
As prevention they recommend using WAF in case none of the other methods (e.g. non-serialisation of sensitive data, using JSON or other simpler format etc.) is possible.
What WAF does is protect the servers from a wide range of attacks using AL and ML to detect normal operational patterns of apps.
This inclines me to agree with answer C.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Balkancruiser
3 years, 9 months agoprmap
3 years, 10 months agovusalrr
4 years ago