[java-sig-commits] [Bug 1512827] CVE-2017-9096 itext: External entities not disabled