Use utils.safe_minidom_parse_string in extensions

Use utils.safe_minidom_parse_string in extensions that were still
directly using potentially-unsafe minidom.

Grizzly backport of John Griffith's master patch.

Fixes bug 1190229

Change-Id: I43afb2e188bbea99ea30fe6cb2eb1aeedc4ddfd4