Set XmlResolver=null to avoid looking up external DTDs.