[java-sig-commits] [Bug 1448753] CVE-2017-7492 SourceProvider in RestEasy-jaxrs is vulnerable to XXE