On Linux and macOS, the backslash () is a valid character in file names. However, when a URL containing a backslash appears in an XInclude or XSD import, it is treated as a path separator, causing the processor to access an unexpected file.
More importantly, this behavior could potentially be exploited to access internal system files, which poses a security risk.