After long minutes of research, I found out that ie9 uses MSXML6 while ie8 uses MSXML 3 and one of the great new features added is the security, details can be found here.
all I need to do in javascript was to set the resolveExternals to true on my xslt object.