Constant MAX_XML_DEPTH

const MAX_XML_DEPTH: usize = 256;

Maximum element nesting. El drops recursively and find_all recurses, so an adversarial file of 100k nested tags would overflow the (UI-thread) stack — which no catch_unwind can catch. Real FCP7/EDL exports are under 20 deep.