<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html [  
  <!ENTITY inject "&#60;script&#62;alert(1)&#60;/script&#62;">
]>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
  <title>Test</title>
</head>

<body>
&inject;
</body>
</html>
