Restrict XML parser from processing external entitites (XXE)