The Java Tutorials have been written for JDK 8. Examples and practices described in this page don't take advantage of improvements introduced in later releases and might use technology no longer available.
See Java Language Changes for a summary of updated language features in Java SE 9 and subsequent releases.
See JDK Release Notes for information about new features, enhancements, and removed or deprecated options for all JDK releases.
StAX, JSR 173, does not support FSP. The StAX implementation in the JDK however, supports the new limit properties and their corresponding system properties. This means that, while there is no FSP to turn on and off the limits, the limits and system properties described work exactly the same.
For compatibility, the StAX specific properties always take effect before the new JAXP limits. The SupportDTD property when set to false, for example, causes an exception to be thrown when an input file contains an Entity reference. Therefore, the addition of the new limits will have no effect for applications that use the SupportDTD property to disable the DTD.