Thank you @jmestwa-coder in particular for also providing a test. I believe I wanted to disable DTD parsing by default and would thus not want to remove the line from DocumentBuilderFactoryConfigurer.Default - tests apart from your own still pass. See #91 for my line of thought back then.

The validation package has DTD parsing enabled but is sing SAXParser rather than DocumentBuilder - there I still believe DTD parsing should remain enabled.

Makes sense. Kept the line in Default so it disables DTD parsing as you intended; the method fix just makes that line actually do something now. Flipped my Default test to assert it rejects a doctype instead of allowing one, and left the SAXParser-based validation path alone.

thank you

While testing things before I must have done something wrong as now tests fail, which is good :-)

I'll introduce a new Configuration for the cases where you want DTD processing but no external DTDs.