XMLInputFactoryUtils added
Switched to 'safe' XMLInputFactory for parsing XML requests
typo in comment
More xml request parsing secured
formatting fixed
missing import added
Improved XMLInputFactoryUtils.newSafeInstance 

javax.xml.stream.isReplacingEntityReferences doesn't prevent entity
replacement within attributes
Merge pull request #25 from copierrj/xml-entities

DTD Entities