[566183] Restrict which external entities are automatically allowed, since some are required for proper XHTML functionality in JSPs.