Prevent XML bombs - enable secure parsing and disallow doctype declarati...

Prevent XML-bomb related attacks by default e.g. http://en.wikipedia.org/wiki/Billion_laughs