Merge pull request #48 from dfj/master

Use the XML_PARSE_NONET option to prevent parameter entity SSRF and XXE