BZ1158017: fix potential XXE vulnerability in jBPM simulation.