4 Security Checks + Indentation Tabs.

3 Security Checks in isValid(). 1 in loadXml() for XEE/XXE attacks.