BZ1158017: fix XXE vulnerability when importing a BP from a bpmn2 (XML) file.