Disable XML entity parsing

Fixes bug 1100282 and bug 1100279.

Change-Id: Ibf2d73bca17b689cfa2dfd29eb15ea6e7458a123