GitHub Security Lab: [Java]: Add XXE sinks

This bug was reported directly to GitHub Security Lab...