4 security checks

3 security checks in isValidate() and loadXml() - XXE/XEE