I've eventually found that the was due to a #Debian specific bug introduced in 2012 in the w3c-dtd-xhtml package (apparently to shared some files between the XHTML 1.0 and XHTML 1.1 DTDs). Details: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993638#102