...
A new XML parser configuration was developed with enhancements for the JAXP secure processing feature. This will allow applications to set global limits (using system properties) on the number and size of entities that should be processed by the parser using system properties. Similar capability was already available programmatically through the XML APIs.
...