XML External entity prevention for Java | Semgrep