[java-sig-commits] [Bug 1088342] CVE-2014-0096 Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs