Or more typically, a half-baked Lisp that uses XML or JSON instead of s-expressions.

Code is data, but the converse of that is that a sufficiently complex configuration file is just a piece of executable code.