Backport of 62abb12..ed584c3 and 8910e51 from master

Fix XML processing in GetID3
Fix XML processing in SabreDAV
Fix a security problem with SabreDAV
Mention external entity patches