Fixing XML parsers security bug