A JDK specific property, `jdk.xml.resource.access`, is added to allow specifying access controls at both intermediate and broad levels, such as permitting a set of trusted domains or all HTTP-based resources. The following setting for example:

    jdk.xml.resource.access = *.sun.com, w3.org, @local

This allows resources from w3.org, all subdomains of sun.com (such as java.sun.com), and resources local to the application to be directly fetched if they are not resolved by a resolver or catalog.