Disable XML parsing per CVE-2013-0156