Can JavaScript injection be done in XML files ?

Question

XML files can bypass firewalls so can malicious script injection be done in these ?

Answer 1

I think you should try OWASP juice shop if you want to learn about web app pentesting more on XML vulnerabilities here :
https://resources.infosecinstitute.com/finding-and-exploiting-xxe-xml-external-entities-injection/#gref