[XXE] Calling from ?

[Bill Fenner]

Thank you!  You're right that it makes sense to just make it a java
call, and not a generic <command>, since there are many (well, pretty
much all) <command>s that don't make sense to call from a process.

  Bill