LPS-50249 Disable external entities in Stax