DTD processing disable. The logs will claim the Injecting entity is undeclared. And expansion is blocked. Also no DTD proccessing takes place so no expansion attacks either.
Went crazy and replaced all the StringBuffers with StringBuilder.
Merge branch 'disable-XXE-DTD' into 1.17-candidate
Merge branch '1.17-candidate' of github.com:lbrackspace/atlas-lb into 1.17-candidate