Ah, yes, the joys of upwards compatibility breaks :-) What I thought were SecurityExceptions thrown by the Security Manager were actually being thrown by the new E interpreter, because I had forgotten that the phrase <import:uri> had been replaced with <unsafe:uri> although import: still has a meaning so does not throw a syntax error. --marcs