This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a change to branch release
in repository https://gitbox.apache.org/repos/asf/commons-secure-xml.git
from e399b14 Bump to next development version
add 9373e0b Updates for the next release
add 80956c5 Updates for the next release
add 851aba8 Updates for the next release
add 33125bd Fix the OpenRewrite migration recipe to target static method
calls instead of class references.
add abc9531 Fix download link
add 0ff445f Update logo with new component name.
add f613c6c The OpenRewrite receipe now adds a dependency on
commons-secure-xml.
add 55d8444 Fix the OpenRewrite migration recipe to add a dependency on
org.apache.commons:commons-secure-xml:1.0.0.
add 4e3f5e5 Bump org.apache.commons:commons-parent from 104 to 105.
add 6167dcf Read the version of the library under test from the POM. (#87)
add 4777f31 Bump gradle-wrapper from 8.10 to 9.7.1 in /android-tests (#91)
add e7acf9f Bump de.mannodermaus.junit5:android-test-runner in
/android-tests (#88)
add 504bf1c Bump de.mannodermaus.android-junit5 in /android-tests (#92)
add 9c30896 Bump commons.graalvm.buildtools.version from 1.1.11 to 1.1.12
(#89)
add 6965883 Bump de.mannodermaus.junit5:android-test-core in
/android-tests (#93)
add fb87d7e Substitute an InputSource when an XMLFilter is parsed with
`null` (#86)
add 0d884ad Reject a foreign Templates in newTransformerHandler in the
TrAX shape (#94)
add 7527005 Javadoc
add 48873b5 Add a unit test that checks that
SecureTransformerFactory.Wrapper.newTransformerHandler(Templates) throws a
ClassCastException.
add 304b436 Bump com.android.library from 8.6.1 to 9.4.0 in
/android-tests (#90)
add da38c00 Create the Transformer of an XMLFilter eagerly and reuse it
(#95)
add 81138e6 Keep a URIResolver a wrapped Transformer already carries (#96)
add 8f1eb61 Sort members
add 6ce3add Javadoc
add bc0dbc1 Javadoc
add 7ad8992 Javadoc
add 0f2f2f2 Javadoc
add 88635d9 Javadoc
add a76f061 Javadoc
add 302f934 Javadoc
add f6ff0ea Javadoc
add 5ffc4cc Javadoc
add 16d6bbf Javadoc
add f1ca3b8 Javadoc
add 974c802 Javadoc
add d30262e Javadoc
add b17eaa9 Javadoc
add cc45c81 Javadoc
add 50b7ed9 Javadoc
add 4cc7403 Javadoc
add 97cdc42 Javadoc
add 814bf1e Javadoc
add 9d79753 Javadoc
add 7606033 Javadoc
add d821a77 Javadoc
add e0698f1 Javadoc
add 59690ab Javadoc
add f59d1be Javadoc
add 8516ccd Javadoc
add 1d2feee Javadoc
add 0f8390f Javadoc
add 661dcf8 Javadoc
add 924bd6b Javadoc
add e0704b6 Javadoc
add e0fa55e Javadoc
add 4e3af7c Javadoc
add 49e2abd Grammar
add 864082e Comments, grammar.
add 49688af Comments, grammar.
add e5e778b Comments, grammar.
add 9c26bf2 Site documentation.
add c9ccb36 Site documentation.
add 189a3e3 Site documentation.
add 26573a6 Site documentation.
add bab46b1 Remove obsolete file.
add cf450ad Remove obsolete file.
add 001954b Site documentation.
add 874241e Comments
add d3ae32f Site documentation.
add 48b40eb Site documentation.
add 642f4e7 Comments
add b56d718 Site documentation.
add df281a7 Site documentation and comments.
add c4c371b Bump actions/setup-java from 6.0.0 to 6.0.1
add a025b8f Bump github/codeql-action/* from 4.37.9 to 4.38.1
add db371b2 Bump commons.graalvm.buildtools.version from 1.1.12 to 1.1.13
(#102)
add ddcd6e5 Bump commons.graalvm.buildtools.version from 1.1.12 to 1.1.13
(#102)
add 3aed2d5 Javadoc
add 9e3689e Bump commons.graalvm.buildtools.version from 1.1.13 to 1.1.14
add e83a045 Fix logo.
add 4497644 Protect main branches
add dc36ef4 Don't rely on redirects.
add f2681b6 Add a section "Migrating to Apache Commons Secure XML with
OpenRewrite"
add 896c915 Fix link
add b1a74f9 Javadoc
add 7ccd51f Format HTML
add cbfcb25 Fix HTML a tags for Windows-only failures (!)
add 87098ea Document JAXB (#103)
add b547c6b Add a TOC to overview.html.
add 5f09671 Add helpers that return a parser directly (COMMONSXML-18)
(#104)
add 1e60a83 Bump github/codeql-action from 4.38.1 to 4.38.2
add 6e06bb0 Bump androidx.test:runner from 1.5.2 to 1.7.0 in
/android-tests (#106)
add f575b17 Bump androidx.test:runner from 1.5.2 to 1.7.0 in
/android-tests (#106)
add 2b4aab8 Bump com.android.library from 9.4.0 to 9.4.1 in
/android-tests (#107)
add 5b8cd23 Bump com.android.library from 9.4.0 to 9.4.1 in
/android-tests (#107)
add 1653d26 Bump gradle-wrapper from 9.7.1 to 9.8.0 in /android-tests
(#108)
add e63a9c2 Bump gradle-wrapper from 9.7.1 to 9.8.0 in /android-tests
(#108)
add f03e9bb Bump org.junit.jupiter:junit-jupiter-api from 5.10.2 to
5.14.4 on Android (#111)
add ef99c7d Bump org.junit.jupiter:junit-jupiter-api from 5.10.2 to
5.14.4 on Android (#111)
add e4193cf Prepare for the release candidate
No new revisions were added by this update.
Summary of changes:
.asf.yaml | 15 +-
.gitattributes | 2 +-
.github/dependabot.yml | 5 +
.github/workflows/codeql-analysis.yml | 6 +-
.github/workflows/maven.yml | 4 +-
.github/workflows/scorecards-analysis.yml | 2 +-
.gitignore | 4 +-
CONTRIBUTING.md | 26 +-
README.md | 10 +-
RELEASE-NOTES.txt | 61 ++-
SECURITY.md | 2 +-
android-tests/README.md | 8 +-
android-tests/build.gradle.kts | 68 +++-
android-tests/gradle/wrapper/gradle-wrapper.jar | Bin 43583 -> 47623 bytes
.../gradle/wrapper/gradle-wrapper.properties | 4 +-
android-tests/gradlew | 18 +-
android-tests/gradlew.bat | 86 +++--
pom.xml | 39 +-
src/changes/changes.xml | 25 +-
src/changes/release-notes.vm | 2 +-
src/conf/maven-pmd-plugin.xml | 6 +-
.../xml/secure/FallbackIgnoreEntityResolver2.java | 22 +-
.../secure/FallbackIgnoreLSResourceResolver.java | 10 +-
.../xml/secure/FallbackIgnoreURIResolver.java | 10 +-
.../xml/secure/FallbackIgnoreXMLResolver.java | 4 +-
.../commons/xml/secure/MethodHandleFactory.java | 10 +-
.../apache/commons/xml/secure/SaxonProvider.java | 22 +-
.../commons/xml/secure/SecureDocumentBuilder.java | 9 +-
.../xml/secure/SecureDocumentBuilderFactory.java | 64 ++-
.../apache/commons/xml/secure/SecureException.java | 40 +-
.../apache/commons/xml/secure/SecureSAXParser.java | 15 +-
.../commons/xml/secure/SecureSAXParserFactory.java | 146 +++++--
.../apache/commons/xml/secure/SecureSchema.java | 7 +-
.../commons/xml/secure/SecureSchemaFactory.java | 34 +-
.../apache/commons/xml/secure/SecureTemplates.java | 16 +-
.../commons/xml/secure/SecureTemplatesHandler.java | 20 +-
.../commons/xml/secure/SecureTransformer.java | 32 +-
.../xml/secure/SecureTransformerFactory.java | 109 ++++--
.../xml/secure/SecureTransformerHandler.java | 19 +-
.../apache/commons/xml/secure/SecureValidator.java | 7 +-
.../commons/xml/secure/SecureValidatorHandler.java | 6 +-
.../apache/commons/xml/secure/SecureXMLFilter.java | 129 +++++--
.../commons/xml/secure/SecureXMLInputFactory.java | 40 +-
.../apache/commons/xml/secure/SecureXMLReader.java | 11 +-
.../org/apache/commons/xml/secure/SecureXPath.java | 20 +-
.../commons/xml/secure/SecureXPathExpression.java | 5 +-
.../commons/xml/secure/SecureXPathFactory.java | 44 ++-
.../apache/commons/xml/secure/doc-files/logo.png | Bin 9454 -> 11258 bytes
.../commons/xml/secure/doc-files/rewrite.yml | 75 +++-
.../apache/commons/xml/secure/package-info.java | 11 +-
src/main/javadoc/overview.html | 428 +++++++++++++-------
src/media/commons-logo-component-100.xcf | Bin 25854 -> 28980 bytes
src/media/commons-logo-component.xcf | Bin 153088 -> 170946 bytes
src/media/logo.png | Bin 9360 -> 11258 bytes
src/site/markdown/index.md | 2 +-
src/site/markdown/security.md | 6 +-
src/site/markdown/shading.md | 10 +-
src/site/markdown/threat_model.md | 52 +--
src/site/xdoc/download_secure-xml.xml | 28 +-
src/site/xdoc/download_xml.xml | 158 --------
src/site/xdoc/issue-tracking.xml | 10 +-
src/test/java/com/saxonica/ProviderMarker.java | 4 +-
.../xml/secure/AccessExternalPropertyTest.java | 12 +-
.../xml/secure/AssociatedStylesheetTest.java | 12 +-
.../commons/xml/secure/AttackTestSupport.java | 429 +++++++++++++++------
.../commons/xml/secure/BillionLaughsTest.java | 78 ++--
.../commons/xml/secure/DenyUnresolvedTest.java | 6 +-
.../apache/commons/xml/secure/DoctypeOnlyTest.java | 6 +-
.../xml/secure/EntityResolverFloorTest.java | 45 ++-
.../apache/commons/xml/secure/ExternalDtdTest.java | 14 +-
.../xml/secure/ExternalGeneralEntityTest.java | 12 +-
.../xml/secure/ExternalParameterEntityTest.java | 20 +-
.../org/apache/commons/xml/secure/JaxbTest.java | 95 +++++
.../apache/commons/xml/secure/NoDoctypeTest.java | 6 +-
.../xml/secure/OverrideDefaultParserTest.java | 18 +-
.../apache/commons/xml/secure/ResetSecureTest.java | 12 +-
.../commons/xml/secure/SaxSurfaceTestSupport.java | 22 +-
.../xml/secure/SaxonAlternateFactoryTest.java | 14 +-
.../commons/xml/secure/SaxonProviderTest.java | 9 +-
.../secure/SaxonTransformerExternalCallsTest.java | 45 ++-
.../xml/secure/SaxonXPathExternalCallsTest.java | 28 +-
.../xml/secure/SchemaContentModelLimitTest.java | 20 +-
.../xml/secure/SchemaFactoryLanguageTest.java | 4 +-
.../commons/xml/secure/SchemaLocationDomTest.java | 25 +-
.../xml/secure/SchemaLocationPropertyTest.java | 20 +-
.../commons/xml/secure/SchemaLocationSaxTest.java | 26 +-
.../secure/SecureDocumentBuilderFactoryTest.java | 72 +++-
.../commons/xml/secure/SecureExceptionTest.java | 2 +-
.../xml/secure/SecureSAXParserFactoryTest.java | 35 +-
.../xml/secure/SecureTransformerFactoryTest.java | 92 ++++-
.../xml/secure/SecureTransformerHandlerTest.java | 14 +
.../commons/xml/secure/SecureTransformerTest.java | 47 +++
.../commons/xml/secure/SecureXMLFilterTest.java | 54 ++-
.../xml/secure/SecureXMLInputFactoryTest.java | 46 ++-
.../commons/xml/secure/SecureXPathFactoryTest.java | 15 +-
.../commons/xml/secure/ShadingFootprintTest.java | 24 +-
.../apache/commons/xml/secure/TestConstants.java | 12 +-
.../commons/xml/secure/TransformerHandlerTest.java | 53 +++
.../secure/UnsupportedXmlImplementationTest.java | 25 ++
.../apache/commons/xml/secure/XIncludeTest.java | 34 +-
.../apache/commons/xml/secure/XMLFilterTest.java | 201 +++++++---
.../commons/xml/secure/XPathInputSourceTest.java | 17 +-
.../org/apache/commons/xml/DescriptorIT.java | 20 +-
103 files changed, 2640 insertions(+), 1129 deletions(-)
delete mode 100644 src/site/xdoc/download_xml.xml
create mode 100644 src/test/java/org/apache/commons/xml/secure/JaxbTest.java
