Fixed xxe problems in Play's Java XML parser