[BRMO-384] Fix Resolving XML external entity in user-controlled data

[mprins]

Fixes:

• https://github.com/B3Partners/brmo/security/code-scanning/1431
• https://github.com/B3Partners/brmo/security/code-scanning/1430
• https://github.com/B3Partners/brmo/security/code-scanning/1429
• https://github.com/B3Partners/brmo/security/code-scanning/1428
• https://github.com/B3Partners/brmo/security/code-scanning/1426
• https://github.com/B3Partners/brmo/security/code-scanning/1425

To fix the problem, we need to configure the DocumentBuilderFactory to disable the parsing of external entities and DTDs. This can be done by setting specific features on the DocumentBuilderFactory instance. The changes should be made in the WozXMLReader class where the DocumentBuilderFactory is instantiated.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[codecov]

Codecov Report

Attention: Patch coverage is 68.42105% with 6 lines in your changes missing coverage. Please review.

Project coverage is 38%. Comparing base (ada4313) to head (248e70f).
Report is 1 commits behind head on master.

Files with missing lines	Patch %	Lines
...main/java/nl/b3p/brmo/loader/xml/BRPXMLReader.java	0%	3 Missing ⚠️
...a/nl/b3p/brmo/loader/xml/BrkSnapshotXMLReader.java	0%	3 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff            @@
##             master   #2310   +/-   ##
========================================
+ Coverage        38%     38%   +1%     
  Complexity      806     806           
========================================
  Files           371     371           
  Lines         18863   18878   +15     
  Branches       1777    1777           
========================================
+ Hits           7153    7162    +9     
- Misses        11138   11143    +5     
- Partials        572     573    +1     

Files with missing lines	Coverage Δ
.../nl/b3p/brmo/loader/xml/Brk2SnapshotXMLReader.java	94% <100%> (+1%)	⬆️
...ain/java/nl/b3p/brmo/loader/xml/GbavXMLReader.java	89% <100%> (+1%)	⬆️
...main/java/nl/b3p/brmo/loader/xml/NhrXMLReader.java	95% <100%> (+1%)	⬆️
...main/java/nl/b3p/brmo/loader/xml/WozXMLReader.java	79% <100%> (+1%)	⬆️
...main/java/nl/b3p/brmo/loader/xml/BRPXMLReader.java	0% <0%> (ø)
...a/nl/b3p/brmo/loader/xml/BrkSnapshotXMLReader.java	0% <0%> (ø)

... and 1 file with indirect coverage changes

---- 🚨 Try these New Features:

• Flaky Tests Detection - Detect and resolve failed and flaky tests
• JS Bundle Analysis - Avoid shipping oversized bundles