lgtm,codescanning

• The query "Resolving XML external entity in user-controlled data" (java/xxe) has been improved to report fewer false positives when a SAXParserFactory is configured safely.