Objective-C : XML external entity (XXE injection)