Introduce XML utilities for dealing with untrusted documents

We are dealing with untrusted XMLs across all projects, with a lot of places instantiation DocumentBuilderFactories and similar.

Create a central place, which will give out properly configured instances, so that we reduce the risk of DoS attacks on code which thinks that a DocumentBuilder, or any XML parser can be trusted in its default configuration.