https://bthanhtung.github.io//posts/xml-based-injection/