Preventing XEE attacks

Preventing XEE attacks by temporarily disabling entity loader for the time parsing external XML.

(I'm not sure whether this pull request is okay. Never did a pull request...)