ncISO 2.3.9 - Uses Saxon-HE for XSLT processing.

This release uses Saxson-HE as the XSLT processor. It support XSLT 3. Also mitigates the org.jdom 1.1 vulnerability by setting saxBuilder.setExpandEntities(false)