Minimize API attack surface for SOAP or XML- based REST APIs with custom schemas in addition to the schemas specified in the API's definition.

Source