Consider preventing XXE vulnerability

[peter279k]

As title, I think it should use the libxml_disable_entity_loader to prevent this vulnerability when the libxml version is lower than 2.9.

Some useful references are as follows:

• https://www.php.net/manual/en/function.libxml-disable-entity-loader.php
• https://github.com/symfony/dom-crawler/blob/5.x/Crawler.php#L232