XXE in .Net and XPathDocument