* catches up to years of negligence for this xml parser which had accumulated a number of outstanding security issues