This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
from c4abe4b Merge pull request #50 from ppkarwasz/docs/changelog-0.1.0
add 78772f1 feat: harden the XPath InputSource evaluation surface
add 5f09174 Merge remote-tracking branch 'apache/main' into
fix/xpath-inputsource-hardening
add c2947e0 Merge branch 'main' into fix/xpath-inputsource-hardening
add 34197e4 Merge remote-tracking branch 'apache/main' into
fix/xpath-inputsource-hardening
add 98125dc fix: remove <editor-fold> comments
add 6315ef8 fix: add Objects.requireNonNull to improve documentation
add 0e2ea99 fix: rename `WHOLE_LIBRARY_SIZE` -> `LIBRARY_CLASS_COUNT`
add b914ebb fix: *DoesNotLeak comments
add 5a2472c fix: checkstyle
add eb53959 fix: Javadoc
add c55c682 fix: assert the strict no-throw outcome in
XPathInputSourceTest
add 36b26a4 Merge remote-tracking branch 'apache/main' into
fix/xpath-inputsource-hardening
add 9eea4a2 docs: add changelog entry
add c49da4d Merge branch 'main' into fix/xpath-inputsource-hardening
add 1ae58fe fix: remove `assertDoesNotThrow` from tests
add 5c62647 Merge branch 'main' into fix/xpath-inputsource-hardening
new b013746 Merge pull request #44 from
ppkarwasz/fix/xpath-inputsource-hardening
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
src/changes/changes.xml | 5 +
.../org/apache/commons/xml/HardeningXPath.java | 140 +++++++++++++++++++++
.../commons/xml/HardeningXPathExpression.java | 60 +++++++++
.../apache/commons/xml/HardeningXPathFactory.java | 73 +++++++++++
.../java/org/apache/commons/xml/XPathHardener.java | 6 +-
.../java/org/apache/commons/xml/XmlFactories.java | 3 +
src/site/markdown/threat_model.md | 2 +-
.../apache/commons/xml/ShadingFootprintTest.java | 22 ++--
.../apache/commons/xml/XPathInputSourceTest.java | 81 ++++++++++++
9 files changed, 380 insertions(+), 12 deletions(-)
create mode 100644 src/main/java/org/apache/commons/xml/HardeningXPath.java
create mode 100644
src/main/java/org/apache/commons/xml/HardeningXPathExpression.java
create mode 100644
src/main/java/org/apache/commons/xml/HardeningXPathFactory.java
create mode 100644
src/test/java/org/apache/commons/xml/XPathInputSourceTest.java
