Updating XML processing to prevent XML bombs