A new system property named `org.jcp.xml.dsig.secureValidation` has been added. It can be used to enable or disable the XML Signature secure validation mode. The system property should be set to "true" to enable, or "false" to disable. Any other value for the system property is treated as "false". If the system property is set, it supersedes the `XMLCryptoContext` property value.

By default, secure validation mode is enabled. Disabling secure validation mode is done at your own risk.