diff --git a/src/SpBundle/Controller/SPController.php b/src/SpBundle/Controller/SPController.php
index 404b793d..8aa489f9 100644
--- a/src/SpBundle/Controller/SPController.php
+++ b/src/SpBundle/Controller/SPController.php
@@ -154,10 +154,12 @@ public function assertionConsumerServiceAction(Request $request)
      */
     private function toFormattedXml($xml)
     {
+        $previous = libxml_disable_entity_loader(true);
         $domxml = new DOMDocument('1.0');
         $domxml->preserveWhiteSpace = false;
         $domxml->formatOutput = true;
         $domxml->loadXML($xml);
+        libxml_disable_entity_loader($previous);
 
         return $domxml->saveXML();
     }