Kotlin : XML external entity (XXE) injection