[jdev] DOM vulnerability/feature

[Sebastiaan Deckers]

This DOM quirk could be of interest to any XMPP developers using
Libxml or MSXML (before 6.0) where resolveExternals is true by
default.

http://pastebin.com/f72bf5426

Remember kids, always set resolveExternals to false before parsing a DOM.

Sebastiaan