The difference between direct and indirect XXE attacks is that $\_\_\_\_\_\_\_\_\_$ attacks do not require that the API endpoint $($server connection$)$ accept an XML payload.