Disable external entity loading in libxml

Per comments on https://gerrit.wikimedia.org/r/#/c/99164/ we
should be disabling entity loading via libxml_disable_entity_loader

Change-Id: I2d50c837e828808c572220a86d35f13f44022a7e
Merge "Disable external entity loading in libxml"