Yes, the Xalan project (and Xerces too) very much needs more active developers. If folks are interested in contributing, I'm all for making that easier, adding them as committers so that they can make direct contributions. Both PMCs would also benefit from having more active people too.
Thanks. Michael Glavassevich XML Technologies and WAS Development IBM Toronto Lab E-mail: [email protected] E-mail: [email protected] Nicolas Grégoire <[email protected]> wrote on 08/23/2017 06:28:51 AM: > Hello! > > > If no one has time to handle these items, would it be possible to > > join the project so that I can get involved in fixing them > > directly? I've already done all the Apache CLA stuff. > > Adding some active members to the project would be a good thing. > There's a few security-related bugs reported years ago and still not > patched, like https://urldefense.proofpoint.com/v2/url? > u=https-3A__issues.apache.org_jira_browse_XALANC-2D762&d=DwIDaQ&c=jf_iaSHvJObTbx- > siA1ZOg&r=KSsQtaTrbQnz98UqasbfUccVGXxb9hHxwso62zJ- > DKI&m=g9kVMHKy4BPR2zFEUZwwTJL_ry4IJsUZYWH05WmBDBg&s=KNPKJ9Gm3UO6Kzep6Zhix- > pAMD0APtZOXpgvq15yvM4&e= > > If the project gets active again, I'd be more than happy to report all > the security bugs I identified in xalan-c while fuzzing XSLT engines. > > Regards, > Nicolas > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected]
