[petl] XML Injection in petl

petl before 1.68, in some configurations, allows resolution of entities in an XML document.
References

https://github.com/petl-developers/petl/security/advisories/GHSA-f5gc-p5m3-v347
https://nvd.nist.gov/vuln/detail/CVE-2020-29128
https://github.com/p…