Comment 6 for bug 1025185

Johan Engelen (johanengelen) wrote :

possible fix:
src/xml/repr-io.cpp line 297:
                                /*XML_PARSE_NOENT |*/ XML_PARSE_HUGE);

This disables reading of a file on Windows (quick test), but it still allows
  <!ENTITY stroke_color "#666666">
so that's nice.

Also, read: https://issues.apache.org/bugzilla/show_bug.cgi?id=53603