XML : how to use TransformerFactory securely with string source in spring

Hi I want to add soap header in my spring application. For that I have used below code snippet in handleRequest method of EndpointInterceptor class.