SQL injection with filter bypass via XML encoding

This is a walkthrough of PortSwigger Lab: SQL injection with filter bypass via XML encoding.