This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
from 87eff6d Merge pull request #38 from
ppkarwasz/docs/supported-runtime-floor
add 94f041d refactor: wrap the Saxon TransformerFactory like every other
implementation
add dec3ac0 feat: harden the SAXTransformerFactory extension surface
add 8bc0d82 docs: bring the SAXTransformerFactory extension surface into
scope
add 11c3740 fix: minor nitpicks
add f45cbaf fix: Javadoc
add 0aeac4b test: work around the Xalan/libexpat namespace-prefixes bug
on Android in XMLFilterTest
new b1a85ef Merge pull request #41 from
ppkarwasz/feature/harden-saxtransformerfactory
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../commons/xml/FallbackIgnoreURIResolver.java | 26 ++-
.../org/apache/commons/xml/HardeningTemplates.java | 19 ++-
...Handler.java => HardeningTemplatesHandler.java} | 90 ++++-------
.../apache/commons/xml/HardeningTransformer.java | 5 +-
.../commons/xml/HardeningTransformerFactory.java | 80 ++++++----
.../commons/xml/HardeningTransformerHandler.java | 174 +++++++++++++++++++++
.../org/apache/commons/xml/HardeningXMLFilter.java | 76 +++++++++
.../org/apache/commons/xml/SAXParserHardener.java | 27 ++--
.../java/org/apache/commons/xml/SaxonProvider.java | 74 +++------
.../apache/commons/xml/TransformerHardener.java | 14 +-
.../java/org/apache/commons/xml/XmlFactories.java | 8 +-
src/site/markdown/index.md | 11 +-
src/site/markdown/threat_model.md | 16 +-
.../org/apache/commons/xml/AttackTestSupport.java | 17 +-
.../apache/commons/xml/SaxSurfaceTestSupport.java | 70 +++++++++
.../apache/commons/xml/ShadingFootprintTest.java | 7 +-
.../apache/commons/xml/TemplatesHandlerTest.java | 77 +++++++++
.../apache/commons/xml/TransformerHandlerTest.java | 85 ++++++++++
.../java/org/apache/commons/xml/XMLFilterTest.java | 119 ++++++++++++++
19 files changed, 801 insertions(+), 194 deletions(-)
copy src/main/java/org/apache/commons/xml/{HardeningValidatorHandler.java =>
HardeningTemplatesHandler.java} (52%)
create mode 100644
src/main/java/org/apache/commons/xml/HardeningTransformerHandler.java
create mode 100644 src/main/java/org/apache/commons/xml/HardeningXMLFilter.java
create mode 100644
src/test/java/org/apache/commons/xml/SaxSurfaceTestSupport.java
create mode 100644
src/test/java/org/apache/commons/xml/TemplatesHandlerTest.java
create mode 100644
src/test/java/org/apache/commons/xml/TransformerHandlerTest.java
create mode 100644 src/test/java/org/apache/commons/xml/XMLFilterTest.java
