This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/commons-bcel.git
from 512a70bb Silent u2/u1 count truncation across dump paths corrupts
emitted bytecode (f013).
new cf5afeaf Repositories cache classes under the input-defined this_class
name; global static Repository/VerifierFactory make the poisoning
ClassLoader-wide. (f012).
new a19a081b Silent u2/u1 count truncation across dump paths corrupts
emitted bytecode. (f013).
new fb72c225 Class2HTML emitters write attacker class-file strings into
HTML unescaped (stored XSS in reports) (f014).
The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
src/changes/changes.xml | 5 ++++-
.../java/org/apache/bcel/util/AttributeHTML.java | 4 ++--
src/main/java/org/apache/bcel/util/Class2HTML.java | 20 +++++++++++++++++++-
src/main/java/org/apache/bcel/util/CodeHTML.java | 2 +-
.../java/org/apache/bcel/util/ConstantHTML.java | 8 ++++----
src/main/java/org/apache/bcel/util/MethodHTML.java | 7 ++++---
.../org/apache/bcel/util/Class2HTMLXSSTest.java | 21 +++++++++++++++++++++
7 files changed, 55 insertions(+), 12 deletions(-)
