CVE-2023-24441: XML external entity vulnerability on agents in Jenkins MSTest Plugin

The vulnerability stems from insecure XML parser configuration. The commit diff shows security hardening in these specific functions by adding: 1) disallow-doctype-decl feature, 2) external entity disabling, and 3) secure processing flags. The affected functions handle XML parsing/transformation of test reports without these protections in vulnerable versions, making them the entry points for XXE exploitation. The patch directly modifies these functions to add security features, confirming their vulnerable status pre-1.0.1.