This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
from 0befc63 Refactor AI copy-pasta slop.
add 86c786c Honor jdk.xml.overrideDefaultParser in the hardened source
rewrites
add f992e26 Shorten the overrideDefaultParser changes.xml entry
add cd0f123 Skip the XSLTC-pinning transform test in the native image
add e8a9abf Merge branch 'main' into
feature/restore-override-default-parser
add 8e490c0 Document that the returned factories are behavior-preserving
wrappers
add 0395537 Reword the threat model's internal parser selection entry
add 5a2d703 Simplify the useDefaultParser Javadoc
add a987c06 Document the default-parser selection in
newNSInstance(boolean)
add 2589e35 Rename useDefaultParser to overrideDefaultParser, matching
the JDK feature
add ffe5b92 Name the factory system properties like the JDK's JdkXmlUtils
add aa9d385 Drop the FODP bullet from the harden() Javadoc
add fed3a4d Javadoc tweak.
add af89c93 Javadoc tweaks.
add 73c452e Match previous commit in text style.
new 3620dda Merge pull request #59 from
apache/feature/restore-override-default-parser
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
pom.xml | 32 ++++-
src/changes/changes.xml | 1 +
.../commons/xml/FallbackIgnoreURIResolver.java | 17 ++-
.../xml/HardeningDocumentBuilderFactory.java | 20 ++++
.../commons/xml/HardeningSAXParserFactory.java | 42 ++++++-
.../org/apache/commons/xml/HardeningSchema.java | 15 ++-
.../apache/commons/xml/HardeningSchemaFactory.java | 33 ++++--
.../org/apache/commons/xml/HardeningTemplates.java | 18 ++-
.../commons/xml/HardeningTemplatesHandler.java | 12 +-
.../apache/commons/xml/HardeningTransformer.java | 22 ++--
.../commons/xml/HardeningTransformerFactory.java | 68 ++++++++---
.../commons/xml/HardeningTransformerHandler.java | 6 +-
.../org/apache/commons/xml/HardeningValidator.java | 16 ++-
.../org/apache/commons/xml/HardeningXMLFilter.java | 2 +-
.../org/apache/commons/xml/HardeningXMLReader.java | 9 ++
.../org/apache/commons/xml/HardeningXPath.java | 24 ++--
.../commons/xml/HardeningXPathExpression.java | 15 ++-
.../apache/commons/xml/HardeningXPathFactory.java | 42 +++----
.../java/org/apache/commons/xml/SaxonProvider.java | 2 +-
.../java/org/apache/commons/xml/package-info.java | 17 +++
src/site/markdown/index.md | 21 ++++
src/site/markdown/threat_model.md | 8 +-
.../org/apache/commons/xml/DenyUnresolvedTest.java | 2 +-
.../commons/xml/OverrideDefaultParserTest.java | 130 +++++++++++++++++++++
.../apache/commons/xml/ShadingFootprintTest.java | 2 +-
.../apache/commons/xml/XPathInputSourceTest.java | 2 +-
26 files changed, 475 insertions(+), 103 deletions(-)
create mode 100644
src/test/java/org/apache/commons/xml/OverrideDefaultParserTest.java
