limit client target url to active services
XMLInputFactoryUtils added
Switched to 'safe' XMLInputFactory for parsing XML requests
typo in comment
More xml request parsing secured
formatting fixed
missing import added
Merge pull request #28 from copierrj/3.2-pre8-backport

3.2 pre8 backport