TRUNK-3942:Possible XXE attacks when parsing downloaded xml files

https://tickets.openmrs.org/browse/TRUNK-3942