Does disabling DTDs break internal entity deduplication?
When hardening XML parsers, many configurations recommend disabling Document Type Definitions (DTDs) entirely to prevent External Entity (XXE) vulnerabilities. However, several legacy data formats rely on internal entities for data deduplication and macro expansion within the document structure. If the disallow-doctype-decl feature is set to true, the parser