Make XMLRPC server safe from XML attacks

- No entity expansions
- No gzip bombs
- No entity references