GRAILS-11324: disable DTD loading by default in internal Grails XML parsing (IOUtils.createParserFactory)