src/java.xml/share/classes/com/sun/org/apache/xerces/internal/jaxp/DocumentBuilderImpl.java

*** 182,201 ****
               * access properties will be set unless the corresponding
               * System Properties or jaxp.properties are set
               */
              if (features != null) {
                  Boolean temp = features.get(XMLConstants.FEATURE_SECURE_PROCESSING);
!                 if (temp != null) {
!                     if (temp && Constants.IS_JDK8_OR_ABOVE) {
                          fSecurityPropertyMgr.setValue(Property.ACCESS_EXTERNAL_DTD,
                                  State.FSP, Constants.EXTERNAL_ACCESS_DEFAULT_FSP);
                          fSecurityPropertyMgr.setValue(Property.ACCESS_EXTERNAL_SCHEMA,
                                  State.FSP, Constants.EXTERNAL_ACCESS_DEFAULT_FSP);
                      }
                  }
              }
-         }
  
          this.grammar = dbf.getSchema();
          if (grammar != null) {
              XMLParserConfiguration config = domParser.getXMLParserConfiguration();
              XMLComponent validatorComponent = null;
--- 182,199 ----
               * access properties will be set unless the corresponding
               * System Properties or jaxp.properties are set
               */
              if (features != null) {
                  Boolean temp = features.get(XMLConstants.FEATURE_SECURE_PROCESSING);
!                 if (temp != null && temp) {
                      fSecurityPropertyMgr.setValue(Property.ACCESS_EXTERNAL_DTD,
                              State.FSP, Constants.EXTERNAL_ACCESS_DEFAULT_FSP);
                      fSecurityPropertyMgr.setValue(Property.ACCESS_EXTERNAL_SCHEMA,
                              State.FSP, Constants.EXTERNAL_ACCESS_DEFAULT_FSP);
                  }
              }
          }
  
          this.grammar = dbf.getSchema();
          if (grammar != null) {
              XMLParserConfiguration config = domParser.getXMLParserConfiguration();
              XMLComponent validatorComponent = null;