    public SAXParser newSAXParser() throws ParserConfigurationException {
        final SAXParser ret;
        try {
            ret = new XercesJAXPSAXParser(this, features, validating, handleXInclude);
        } catch (final SAXException se) {
            // Translate to ParserConfigurationException
            throw new OXFException(se); // so we see a decent stack trace!
//            throw new ParserConfigurationException(se.getMessage());
        }
        return ret;
    }
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.