This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit 461a2ec32dc887e1ec92c834635fe00b97effb16 Author: Gary Gregory <[email protected]> AuthorDate: Fri Aug 28 13:52:59 2026 -0400 Javadoc: "hardened" -> "secured" wording to match new class and method names. --- src/main/java/org/apache/commons/xml/FallbackIgnoreURIResolver.java | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/main/java/org/apache/commons/xml/FallbackIgnoreURIResolver.java b/src/main/java/org/apache/commons/xml/FallbackIgnoreURIResolver.java index c9a5ca5..ccef795 100644 --- a/src/main/java/org/apache/commons/xml/FallbackIgnoreURIResolver.java +++ b/src/main/java/org/apache/commons/xml/FallbackIgnoreURIResolver.java @@ -34,7 +34,7 @@ * {@link URIResolver} floor: consults an optional caller-supplied resolver and ignores (resolves to empty) whatever the caller does not resolve. * <p> * The XSLT counterpart of {@link FallbackIgnoreEntityResolver2}, guarding {@code xsl:import}/{@code xsl:include} at compile time and {@code document()} at - * transform time. The hardened {@link javax.xml.transform.TransformerFactory} and {@link javax.xml.transform.Transformer} wrappers install one of these and + * transform time. The secure {@link javax.xml.transform.TransformerFactory} and {@link javax.xml.transform.Transformer} wrappers install one of these and * route a caller-set resolver through {@link #setDelegate} rather than letting it replace the floor. A caller opts a specific URI in by returning a * non-{@code null} {@link Source}; anything left unresolved resolves to an empty {@link Source}, so the external resource is neither fetched nor leaked. * </p> @@ -43,7 +43,7 @@ * while the Saxon path supplies {@code EmptySource.getInstance()} so its consumers get the "empty" shape they expect. * </p> * <p> - * An opted-in {@link javax.xml.transform.stream.StreamSource} or reader-less {@link javax.xml.transform.sax.SAXSource} is rewritten to carry a hardened reader + * An opted-in {@link javax.xml.transform.stream.StreamSource} or reader-less {@link javax.xml.transform.sax.SAXSource} is rewritten to carry a secure reader * before it is returned, so the implementation parses the opted-in content on the same floor instead of with an internal reader at its own defaults. A * {@link javax.xml.transform.dom.DOMSource} or a {@link javax.xml.transform.sax.SAXSource} carrying the caller's own reader is returned as-is. * </p> @@ -124,7 +124,7 @@ URIResolver getDelegate() { public Source resolve(final String href, final String base) throws TransformerException { final Source resolved = delegate != null ? delegate.resolve(href, base) : null; if (resolved != null) { - // The implementation parses the opted-in handle with an internal reader at its own defaults; the rewrite hands it a hardened reader instead. + // The implementation parses the opted-in handle with an internal reader at its own defaults; the rewrite hands it a secure reader instead. return SecureSAXParserFactory.secure(resolved, overrideDefaultParser.getAsBoolean()); } if (SecureException.throwOnUnresolved()) {
