remove external entities processing in XML mode

Author: ylafon

org/w3c/css/css/XMLStyleSheetHandler.java

@@ -491,12 +491,12 @@ void parse(URL url) throws Exception {
                     "http://xml.org/sax/features/namespace-prefixes", true);
             xmlParser.setFeature("http://xml.org/sax/features/validation",
                     false);
-            /*
-            * xmlParser.setFeature("http://xml.org/sax/features/external-parameter-entities",
-            * false);
-            * xmlParser.setFeature("http://xml.org/sax/features/external-general-entities",
-            * false);
-            */
+           /* readded 20250128, check report if things break */ 
+            xmlParser.setFeature("http://xml.org/sax/features/external-parameter-entities",
+            false);
+            xmlParser.setFeature("http://xml.org/sax/features/external-general-entities",
+            false);
+           /*     */
         } catch (Exception ex) {
             ex.printStackTrace();
         }