xsl processors turn off extension functions

Anyone know of a resource giving details of different processors handling of
security for stylesheets containing extension functions, for example which
processors it is possible to turn off extension function support when calling an
individual stylesheet.

If not, what extra security functionality can you think of that various
processors you work with provide?