This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch feature/reduce-shade-footprint in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit c457f0f493c8bdf769b4e7565ba2c39ed5469d69 Merge: 5c7688c 751cb71 Author: Gary Gregory <[email protected]> AuthorDate: Tue Aug 18 06:12:41 2026 -0400 Merge pull request #34 from apache/remove/harden-source Remove `XmlFactories.harden(XMLReader)` and `harden(Source)` .../commons/xml/DocumentBuilderHardener.java | 21 +--- .../xml/FallbackDenyLSResourceResolver.java | 55 --------- .../commons/xml/FallbackDenyXMLResolver.java | 84 ------------- ...er2.java => FallbackIgnoreEntityResolver2.java} | 44 ++++--- .../xml/FallbackIgnoreLSResourceResolver.java | 83 +++++++++++++ ...esolver.java => FallbackIgnoreURIResolver.java} | 36 +++++- .../commons/xml/FallbackIgnoreXMLResolver.java | 32 ++++- .../commons/xml/HardeningDocumentBuilder.java | 8 +- .../xml/HardeningDocumentBuilderFactory.java | 2 +- .../org/apache/commons/xml/HardeningException.java | 19 ++- .../org/apache/commons/xml/HardeningSchema.java | 4 +- .../apache/commons/xml/HardeningSchemaFactory.java | 10 +- .../apache/commons/xml/HardeningTransformer.java | 8 +- .../commons/xml/HardeningTransformerFactory.java | 6 +- .../org/apache/commons/xml/HardeningValidator.java | 8 +- .../commons/xml/HardeningValidatorHandler.java | 6 +- .../commons/xml/HardeningXMLInputFactory.java | 25 ++-- .../org/apache/commons/xml/HardeningXMLReader.java | 16 +-- .../org/apache/commons/xml/SAXParserHardener.java | 102 ++-------------- .../java/org/apache/commons/xml/SaxonProvider.java | 71 +++++++++-- .../org/apache/commons/xml/SchemaHardener.java | 2 +- .../java/org/apache/commons/xml/StaxHardener.java | 67 +---------- .../apache/commons/xml/TransformerHardener.java | 10 +- .../java/org/apache/commons/xml/XmlFactories.java | 33 ++---- src/site/markdown/index.md | 45 ++++++- src/site/markdown/threat_model.md | 11 +- .../org/apache/commons/xml/AttackTestSupport.java | 124 +++++++++++++++---- .../org/apache/commons/xml/DenyUnresolvedTest.java | 62 ++++++++++ .../commons/xml/EntityResolverFloorTest.java | 131 ++++++++++----------- .../org/apache/commons/xml/ExternalDtdTest.java | 17 ++- .../commons/xml/ExternalGeneralEntityTest.java | 40 ++++--- .../commons/xml/ExternalParameterEntityTest.java | 42 ++++--- .../apache/commons/xml/SchemaLocationDomTest.java | 28 ++--- .../commons/xml/SchemaLocationPropertyTest.java | 2 +- .../apache/commons/xml/SchemaLocationSaxTest.java | 31 +++-- .../apache/commons/xml/ShadingFootprintTest.java | 21 ++-- .../apache/commons/xml/TemplatesImportTest.java | 2 +- .../apache/commons/xml/TemplatesIncludeTest.java | 2 +- .../commons/xml/TransformerDocumentTest.java | 2 +- .../java/org/apache/commons/xml/XIncludeTest.java | 118 +++++++------------ 40 files changed, 741 insertions(+), 689 deletions(-)
