this PR will give scala-xml more secure defaults:
can anyone with knowledge in this area help with reviewing the PR…?