.xml
Use cautionExtensible Markup Language
A tag-based markup for structured data. Still everywhere — configs, RSS feeds, SOAP APIs, and Office Open XML packages.
MIME types
- application/xml
- text/xml
Category
data
What opens this file
- VS Code
- XMLSpy
- Browsers
- Oxygen XML
How to open by OS
Windows
- VS Code, Notepad (slow on big files), browsers.
Mac
- VS Code, browsers.
Linux
- VS Code, xmllint, vim.
Ios
- Koder.
Android
- Acode.
Safety notes
- XXE (XML External Entity) attacks can read arbitrary local files if the parser resolves external entities. Disable them server-side.
- Billion Laughs and similar expansion attacks can DoS parsers; enforce entity-expansion limits.
Common mistakes
- Mixing XML and HTML and forgetting to self-close void elements (
<br/>,<img/>) — XML requires closure. - Shipping a UTF-8 BOM together with an XML declaration confuses some parsers.