[java-sig-commits] [Bug 1694857] CVE-2019-9658 checkstyle: Loads external DTDs by default