title: Solve security issue parsing xml using SAX parser
body: <p>I have an android app, in which user can enter any xml source url to parse. My app then parses the xml(if valid) and displays results.</p>
  
  <p>The issue is, <strong>if the user enters an untrusted xml source url</strong>, the app and/or the device might be effected. </p>
  
  <p>What are the <strong>best ways to identify risk and prevent exploit</strong>.</p>
  
  <p>With my research I found that enabling FEATURE_SECURE_PROCESSING and disabling expansion might help. But can anyone tell me what it is, and how do I achieve it.</p>
  
  <p>Thanks.</p>