xxxxxxxxXmlResolver can be set only by fully trusted code.