XML Sources: disable security check