Drupal 6.32/7.30 affected by XML Quadratic Blowup