In this blog post, you can read just how much of a mess Java XML security is