additional protection against XML external entity attacks
[nl] disable rule, as requested by Ruud