Disable DOCTYPE Disable external entities Disable external DTD loading Enable secure processing mode Disable XInclude Limit entity expansion Do not use legacy XML parsers Never parse untrusted XML ...