Merge pull request #254 from mybatis/autofix/alert-4-2f1a331131

Fix code scanning alert no. 4: Resolving XML external entity in user-controlled data

src/main/java/com/ibatis/common/xml/NodeletParser.java

@@ -254,7 +254,7 @@ private Document createDocument(InputStream inputStream)
     factory.setIgnoringComments(true);
     factory.setIgnoringElementContentWhitespace(false);
     factory.setCoalescing(false);
-    factory.setExpandEntityReferences(true);
+    factory.setExpandEntityReferences(false);
 
     DocumentBuilder builder = factory.newDocumentBuilder();
     builder.setEntityResolver(entityResolver);