improved XXE fix (CVE-2014-2053)