Is sitemap xml vulnerable?