Information disclosure by answers to XPath queries
S. Böttcher, R. Hartel, Journal of Computer Security 17 (2009) 69–99.