Is the link to prevent XML external entity injection updated or changed? I was told to add this to prevent external entity injection,