For XMLDocument and XMLUtil parsing

If your customizations use XMLDocument or XMLUtil, set the following system properties. They control entity expansion and enable the validation of external entities, which allow processing of only ones on inclusion lists.