Disable XML entity parsing

Fixes bug 1100282 and bug 1100279.

Change-Id: I6a7c9e7110e1c7890205d6e4550ab46295c68906
Merge "Disable XML entity parsing"