This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit 441c008c9ad8e244c43c5509aab649c209fab9a3 Author: Gary Gregory <[email protected]> AuthorDate: Sat Aug 1 14:47:18 2026 -0400 Make package private class SaxonProviderConfigurer final --- src/main/java/org/apache/commons/xml/SaxonProvider.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/main/java/org/apache/commons/xml/SaxonProvider.java b/src/main/java/org/apache/commons/xml/SaxonProvider.java index e7ea690..e87b45f 100644 --- a/src/main/java/org/apache/commons/xml/SaxonProvider.java +++ b/src/main/java/org/apache/commons/xml/SaxonProvider.java @@ -51,7 +51,7 @@ final class SaxonProvider { * sidestep the URI restrictions.</li> * </ol> */ - private static class HardenedConfiguration extends Configuration { + private static final class HardenedConfiguration extends Configuration { private HardenedConfiguration() { // Extension-function layer: turn off Saxon's reflection-based extension calls. Without this an attacker could bypass URI restrictions through @@ -78,7 +78,7 @@ public XMLReader makeParser(final String className) throws TransformerFactoryCon } } - private static class SaxonProviderConfigurer { + private static final class SaxonProviderConfigurer { private static TransformerFactory configure(final TransformerFactory factory) { ((SaxonTransformerFactory) factory).setConfiguration(new HardenedConfiguration());
