XXE security issue.

Issue #414.