This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit b0137469c496ba918ea1983d512d9d7f571cb603 Merge: c4abe4b 5c62647 Author: Gary Gregory <[email protected]> AuthorDate: Wed Aug 26 07:22:36 2026 -0400 Merge pull request #44 from ppkarwasz/fix/xpath-inputsource-hardening Harden the XPath InputSource evaluation surface src/changes/changes.xml | 5 + .../org/apache/commons/xml/HardeningXPath.java | 140 +++++++++++++++++++++ .../commons/xml/HardeningXPathExpression.java | 60 +++++++++ .../apache/commons/xml/HardeningXPathFactory.java | 73 +++++++++++ .../java/org/apache/commons/xml/XPathHardener.java | 6 +- .../java/org/apache/commons/xml/XmlFactories.java | 3 + src/site/markdown/threat_model.md | 2 +- .../apache/commons/xml/ShadingFootprintTest.java | 22 ++-- .../apache/commons/xml/XPathInputSourceTest.java | 81 ++++++++++++ 9 files changed, 380 insertions(+), 12 deletions(-)
