xxe vulnerabilities

[QiAnXinCodeSafe]

Hello, I am a member of the 360 Code Guard team. In our open source project code audit, we found that Pippo has xxE vulnerabilities. Details are as follows.
pippo/pippo-content-type-parent/pippo-jaxb/src/main/java/ro/pippo/jaxb/JaxbEngine.java

Because the XML parser does not disable dtd, xxE attacks can occur when content parameters are controlled by malicious attackers

[decebals]

@360CodeSafe
Thanks! Do you have a solution? Can you create a PR?

[QiAnXinCodeSafe]

I'm sorry，I don't currently have git installed on my computer, but I can give you a fix.

[decebals]

@360CodeSafe
The information supplied by you is enough for us to fix the problem. Thanks!