If you intend to use the XML type as a property or as the argument to a service call, you must first disable XXE checking within your application. See https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing for more information on XXE vulnerabilities. Disabling XXE checking is required because the XML parser of Android does not support this feature. If you do not disable XXE checking, all modifications to XML type properties will fail to be updated on your ThingWorx platform.

At any time during the startup of your application, preferably in your main activity's onCreate() method, include the following line of code to disable XXE checking:

If you are basing your projects on the Android Shell example, this is already done for you since this line occurs in the provided ThingworxActivity base class