When libxmlloader options are the default values, disable the entity loader as well. CVE-2014-2054 by MITRE

When libxmlloader options are the default values, disable the entity loader as well. CVE-2014-2054 by MITRE