[Chanel (chanel-y)]

Change 1 - Recognize schema validation in XML reader settings initializers

For example:

var settings = new XmlReaderSettings
{
    ValidationType = ValidationType.Schema
};
settings.Schemas.Add("urn:my-schema", "my.xsd");
XmlReader.Create(new StringReader(xml), settings);

was still being flagged because it was in an object initializer

2 - exclude Stream.Null from tainted XML inputs.

Port of Raul's initial query fix, okta just hates him so doing it on his behalf