disable libxml entity loader to prevent attacks via xml external entities (fixes #833)
release 1.15