Disable XML entity parsing

Fixes bug 1100282 and bug 1100279.

Change-Id: Idd3989356dfededc3d863770f0ca1661c1d45782