w3c/rdfvalidator-ng — pull request #3 by betehess (2014-07-02 15:53:20+00:00)
Title: Fix XXE issue

[This is for @tguild and @ylafon to review]

This fixes a security issue. It can be tested with the following input:

```xml

]>

&test;

```

The fix is ugly because neither `com.hp.hpl.jena.rdf.arp.ARP` nor `org.apache.xerces.parsers.SAXParser` would expose the underlying Xerces parser, so this relies on reflection.

I have also done some clean-up by updating the dependencies.