Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java