Preventing XEE attacks

Preventing XEE attacks by temporarily disabling entity loader for the time parsing XML from external source.

(I'm not sure whether this pull request is okay. Never did a pull request...)