Set properties on XML parsers to prevent XXE attack