Added fix for CVE-2013-0156

Removed parsing of XML input parameters to defend against CVE-2013-0156