(May 21) Xalan-Java could be made to load arbitrary classes or access externalresources.