Disable XML external entities before parsing.
Updates fmj to r93.