XML; don’t load external entitiesHTML5