Disable XML entities when parsing XML

Please review @LukasReschke @karlitschek @schiesbn