lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files

...