[HTA2] XXE on https:// via SpellCheck Endpoint.