Set secure processing feature on SchemaFactory
diff --git a/decorator/src/main/java/org/apache/cxf/dosgi/dsw/decorator/DecorationParser.java b/decorator/src/main/java/org/apache/cxf/dosgi/dsw/decorator/DecorationParser.java
index 82753b1..1f35820 100644
--- a/decorator/src/main/java/org/apache/cxf/dosgi/dsw/decorator/DecorationParser.java
+++ b/decorator/src/main/java/org/apache/cxf/dosgi/dsw/decorator/DecorationParser.java
@@ -48,6 +48,7 @@
jaxbContext = JAXBContext.newInstance(ServiceDecorationsType.class.getPackage().getName(),
this.getClass().getClassLoader());
SchemaFactory schemaFactory = SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI);
+ schemaFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, Boolean.TRUE);
URL resource = getClass().getResource("/service-decoration.xsd");
schema = schemaFactory.newSchema(resource);
} catch (Exception e) {