Security review for XML processing

[uogbuji]

We've known of security vulnerabilities dating from the 4Suite days, many of which are inherited from expat. We've closed some, but there are indications of more, including new ones discovered in our XSLT implementation. This ticket is a general placeholder for sound security review of amara.