diff --git a/decorator/src/main/java/org/apache/cxf/dosgi/dsw/decorator/DecorationParser.java b/decorator/src/main/java/org/apache/cxf/dosgi/dsw/decorator/DecorationParser.java
index 82753b1..1f35820 100644
--- a/decorator/src/main/java/org/apache/cxf/dosgi/dsw/decorator/DecorationParser.java
+++ b/decorator/src/main/java/org/apache/cxf/dosgi/dsw/decorator/DecorationParser.java
@@ -48,6 +48,7 @@
             jaxbContext = JAXBContext.newInstance(ServiceDecorationsType.class.getPackage().getName(),
                                                   this.getClass().getClassLoader());
             SchemaFactory schemaFactory = SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI);
+            schemaFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, Boolean.TRUE);
             URL resource = getClass().getResource("/service-decoration.xsd");
             schema = schemaFactory.newSchema(resource);
         } catch (Exception e) {