diff --git a/validator/src/main/java/org/mustangproject/validator/Validator.java b/validator/src/main/java/org/mustangproject/validator/Validator.java
index 92e38228..539bf4c9 100644
--- a/validator/src/main/java/org/mustangproject/validator/Validator.java
+++ b/validator/src/main/java/org/mustangproject/validator/Validator.java
@@ -61,10 +61,8 @@ public abstract class Validator {
 		Source xmlData = new StreamSource(new ByteArrayInputStream(xmlRawData));
 		SchemaFactory schemaFactory = SchemaFactory.newInstance(XMLConstants.W3C_XML_SCHEMA_NS_URI);
 		try {
-			schemaFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
+//			schemaFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
 			schemaFactory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
-			schemaFactory.setFeature("http://xml.org/sax/features/external-general-entities", false);
-			schemaFactory.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
 			Schema schema = schemaFactory.newSchema(schemaFile);
 			javax.xml.validation.Validator validator = schema.newValidator();
 			validator.validate(xmlData);
diff --git a/validator/src/main/java/org/mustangproject/validator/ZUGFeRDValidator.java b/validator/src/main/java/org/mustangproject/validator/ZUGFeRDValidator.java
index 1b328cd0..a64efdce 100644
--- a/validator/src/main/java/org/mustangproject/validator/ZUGFeRDValidator.java
+++ b/validator/src/main/java/org/mustangproject/validator/ZUGFeRDValidator.java
@@ -152,7 +152,6 @@ public class ZUGFeRDValidator {
 						//OWASP
 						//https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html
 						dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
-						dbf.setFeature("http://xml.org/sax/features/external-general-entities", false);
 						dbf.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
 						// Disable external DTDs as well
 						dbf.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);