Don't load external entities in xml_to_object
Merged in libxml_17 (pull request #6)

Don't load external entities in xml_to_object
Preparing 1.7.20 release