Disable XML parsing as workaround for security hole