Hah, I knew I've already seen this before! Someone submitted this link two weeks ago[1], and in that same thread someone mentioned the billion laughs attack[2].

[1] http://news.ycombinator.com/item?id=4616081

[2] http://news.ycombinator.com/item?id=4616922