src/com/sun/org/apache/xerces/internal/jaxp/validation/ValidatorHandlerImpl.java

*** 685,694 ****
--- 685,695 ----
                          // If this is a Xerces SAX parser, set the security manager if there is one
                          if (reader instanceof com.sun.org.apache.xerces.internal.parsers.SAXParser) {
                             XMLSecurityManager securityManager = (XMLSecurityManager) fComponentManager.getProperty(SECURITY_MANAGER);
                             if (securityManager != null) {
                                 try {
+                                    securityManager.resetLimits();
                                     reader.setProperty(SECURITY_MANAGER, securityManager);
                                 }
                                 // Ignore the exception if the security manager cannot be set.
                                 catch (SAXException exc) {}
                             }