Xalan & Java security bug on FreeMind

[Eric Lavarde <deb@zorglub.s.bawue.de>]

Hello,

could anybody have a look at http://bugs.debian.org/619140 and tell me 
what the following could mean:

java.lang.RuntimeException: Use of the extension function
'xalan://freemind.main.HtmlTools:replaceSpacesToNonbreakableSpaces' is
not allowed when the secure processing feature is set to true.

Did something change relatively recently in terms of Xalan and/or 
security settings?

Thanks, Eric

PS: I already asked upstream, they don't have a clue and suspect a 
Debian specific setting.