This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-digester.git
The following commit(s) were added to refs/heads/master by this push:
new 54841241 Replace SAXParserFactory with SecureSAXParserFactory
54841241 is described below
commit 548412411c7696979b3ed16227bbcf30763fc967
Author: Gary Gregory <[email protected]>
AuthorDate: Tue Sep 8 17:05:33 2026 -0400
Replace SAXParserFactory with SecureSAXParserFactory
---
.../test/java/org/apache/commons/digester3/TestEntityResolution.java | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git
a/commons-digester3-core/src/test/java/org/apache/commons/digester3/TestEntityResolution.java
b/commons-digester3-core/src/test/java/org/apache/commons/digester3/TestEntityResolution.java
index 37383146..021d02ad 100644
---
a/commons-digester3-core/src/test/java/org/apache/commons/digester3/TestEntityResolution.java
+++
b/commons-digester3-core/src/test/java/org/apache/commons/digester3/TestEntityResolution.java
@@ -22,6 +22,7 @@ import java.io.File;
import javax.xml.parsers.SAXParser;
import javax.xml.parsers.SAXParserFactory;
+import org.apache.commons.xml.secure.SecureSAXParserFactory;
import org.junit.jupiter.api.Test;
import org.xml.sax.helpers.DefaultHandler;
@@ -44,7 +45,7 @@ public class TestEntityResolution
void testParserResolveRelative()
throws Exception
{
- final SAXParserFactory factory = SAXParserFactory.newInstance();
+ final SAXParserFactory factory = SecureSAXParserFactory.newInstance();
factory.setValidating( true );
factory.setNamespaceAware( true );
final SAXParser parser = factory.newSAXParser();