This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit 33373046a30444a5131b1e3f031fe38ff579d0b1 Merge: 6f1cdca cc78d16 Author: Piotr P. Karwasz <[email protected]> AuthorDate: Tue Aug 18 06:08:11 2026 -0400 Merge pull request #30 from apache/feature/ignore-all-resolver-floors COMMONSXML-4: Make the resolver floors ignore-all with a throw-on-unresolved toggle android-tests/build.gradle.kts | 5 + pom.xml | 9 + .../commons/xml/DocumentBuilderHardener.java | 24 +- .../commons/xml/FallbackIgnoreEntityResolver2.java | 141 ++++++++++ .../xml/FallbackIgnoreLSResourceResolver.java | 83 ++++++ .../commons/xml/FallbackIgnoreURIResolver.java | 80 ++++++ .../commons/xml/FallbackIgnoreXMLResolver.java | 67 +++++ .../commons/xml/HardeningDocumentBuilder.java | 8 +- .../xml/HardeningDocumentBuilderFactory.java | 2 +- .../org/apache/commons/xml/HardeningException.java | 43 ++- .../org/apache/commons/xml/HardeningSchema.java | 2 +- .../apache/commons/xml/HardeningSchemaFactory.java | 8 +- .../apache/commons/xml/HardeningTransformer.java | 10 +- .../commons/xml/HardeningTransformerFactory.java | 10 +- .../org/apache/commons/xml/HardeningValidator.java | 10 +- .../commons/xml/HardeningValidatorHandler.java | 6 +- .../commons/xml/HardeningXMLInputFactory.java | 25 +- .../org/apache/commons/xml/HardeningXMLReader.java | 16 +- .../java/org/apache/commons/xml/JaxpSetters.java | 151 ---------- .../java/org/apache/commons/xml/Resolvers.java | 313 --------------------- .../org/apache/commons/xml/SAXParserHardener.java | 133 ++++----- .../java/org/apache/commons/xml/SaxonProvider.java | 73 ++++- .../org/apache/commons/xml/SchemaHardener.java | 53 ++++ .../java/org/apache/commons/xml/StaxHardener.java | 61 +--- .../apache/commons/xml/TransformerHardener.java | 20 +- .../java/org/apache/commons/xml/XPathHardener.java | 19 +- .../java/org/apache/commons/xml/XmlFactories.java | 35 +-- src/site/markdown/index.md | 45 ++- src/site/markdown/threat_model.md | 11 +- .../org/apache/commons/xml/AttackTestSupport.java | 114 ++++++-- .../org/apache/commons/xml/DenyUnresolvedTest.java | 62 ++++ .../commons/xml/EntityResolverFloorTest.java | 131 ++++----- .../org/apache/commons/xml/ExternalDtdTest.java | 17 +- .../commons/xml/ExternalGeneralEntityTest.java | 40 +-- .../commons/xml/ExternalParameterEntityTest.java | 42 +-- .../apache/commons/xml/SchemaLocationDomTest.java | 28 +- .../commons/xml/SchemaLocationPropertyTest.java | 2 +- .../apache/commons/xml/SchemaLocationSaxTest.java | 31 +- .../apache/commons/xml/ShadingFootprintTest.java | 205 ++++++++++++++ .../apache/commons/xml/TemplatesImportTest.java | 2 +- .../apache/commons/xml/TemplatesIncludeTest.java | 2 +- .../commons/xml/TransformerDocumentTest.java | 2 +- .../java/org/apache/commons/xml/XIncludeTest.java | 106 +++---- 43 files changed, 1307 insertions(+), 940 deletions(-)
