How to use XMLDecoder securely - IriusRisk