This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit 5a9088eb5fa6d6ec290058abb38d7896948111bf Author: Gary Gregory <[email protected]> AuthorDate: Fri Aug 28 17:39:59 2026 -0400 Javadoc: Use "secure" terminology. --- src/test/java/org/apache/commons/xml/AttackTestSupport.java | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/test/java/org/apache/commons/xml/AttackTestSupport.java b/src/test/java/org/apache/commons/xml/AttackTestSupport.java index b9b3574..8e465d5 100644 --- a/src/test/java/org/apache/commons/xml/AttackTestSupport.java +++ b/src/test/java/org/apache/commons/xml/AttackTestSupport.java @@ -61,7 +61,7 @@ * <p>The secure-side helpers come in three flavors, distinguished by their suffix:</p> * * <ul> - * <li>{@code assert*Blocks(...)} runs the payload through a secure factory from {@link org.apache.commons.xml} and asserts the parse throws. Used when the hardening + * <li>{@code assert*Blocks(...)} runs the payload through a secure factory from {@link org.apache.commons.xml} and asserts the parse throws. Used when the secure * layer is expected to reject the attack outright.</li> * <li>{@code assert*DoesNotLeak(...)} runs the payload through a secure factory and asserts the parse completes without throwing and without producing the * {@link #LEAKED_MARKER} string. Used when the secure contract guarantees the parse succeeds but never resolves the external resource (for example, @@ -595,7 +595,7 @@ static void assertTemplatesCompiles(final Source xslt) { /** * Asserts a secure Templates compile-and-transform completes without throwing and without leaked content. * - * <p>{@link TransformerFactory#newTemplates(Source)} via {@link SecureTransformerFactory#newInstance()} followed by transform; use this when the hardening + * <p>{@link TransformerFactory#newTemplates(Source)} via {@link SecureTransformerFactory#newInstance()} followed by transform; use this when the secure * contract guarantees the compile and transform succeed but never resolve the external resource.</p> */ static void assertTemplatesDoesNotLeak(final Source xslt) { @@ -624,7 +624,7 @@ static void assertTransformerBlocksOrDoesNotLeak(final String payload) { /** * Asserts a secure identity Transformer completes without throwing and without leaked content. * - * <p>{@link Transformer#transform(Source, javax.xml.transform.Result)} via {@link SecureTransformerFactory#newInstance()}; use this when the hardening + * <p>{@link Transformer#transform(Source, javax.xml.transform.Result)} via {@link SecureTransformerFactory#newInstance()}; use this when the secure * contract guarantees the transform succeeds but never resolves the external resource.</p> */ static void assertTransformerDoesNotLeak(final String payload) { @@ -927,7 +927,7 @@ private static boolean probeDomResolvesInternalEntities() { } } - /** Builds a raw {@link XMLReader} from a deliberately permissive {@link SAXParserFactory} and hardens it via {@link SecureSAXParserFactory#secure(XMLReader)}. */ + /** Builds a raw {@link XMLReader} from a deliberately permissive {@link SAXParserFactory} and secures it via {@link SecureSAXParserFactory#secure(XMLReader)}. */ private static XMLReader rawSecureXMLReader() throws Exception { final SAXParserFactory factory = SAXParserFactory.newInstance(); if (!IS_ANDROID) {
