For privacy reasons please do not contact external resources without asking the user before.
I.e. disable option "Download external resources like referenced DTD, XSD" by default.
Optional gold plating: Let the user maintain a list of trusted hosts or resources.