Prevent XXE injection during CycloneDX validation and parsing

[nscuro]

Description

Disables XXE support in the XmlInputFactory used for determining the schema version prior to validation.

Addressed Issue

N/A

Additional Details

N/A

Checklist

• [x] I have read and understand the contributing guidelines
• [x] This PR fixes a defect, and I have provided tests to verify that the fix is effective
• ~This PR implements an enhancement, and I have provided tests to verify that it works as intended~
• ~This PR introduces changes to the database model, and I have added corresponding update logic~
• ~This PR introduces new or alters existing behavior, and I have updated the documentation accordingly~

[codacy-production[bot]]

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation	Diff coverage
:white_check_mark: +0.01% (target: -1.00%)	:white_check_mark: 100.00% (target: 70.00%)

Coverage variation details

| | Coverable lines | Covered lines | Coverage | | ------------- | ------------- | ------------- | ------------- | | Common ancestor commit (bc2de4296c6f0d9f9e27db615230c177f77c064d) | 21698 | 16498 | 76.03% | | | Head commit (d6ff766616d68668f24b7189f2eee8984780b9bb) | 21705 (+7) | 16505 (+7) | 76.04% (**+0.01%**) | **Coverage variation** is the difference between the coverage for the head and common ancestor commits of the pull request branch: ` - `

Diff coverage details

| | Coverable lines | Covered lines | Diff coverage | | ------------- | ------------- | ------------- | ------------- | | Pull request (#3870) | 9 | 9 | **100.00%** | **Diff coverage** is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: `/ * 100%`

See your quality gate settings    Change summary preferences

---

_{:rocket: Don’t miss a bit, follow what’s new on Codacy.}

_{Codacy stopped sending the deprecated coverage status on June 5th, 2024. Learn more}