This is an automated email from the ASF dual-hosted git repository.
robertlazarski pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/axis-axis2-java-core.git
from dfacb5c702 Pin the ant builds to a Java 17 release
new 5e8ee0f31f Stop publishing default admin console credentials
new 056750c5c3 Require opt-in to select a service from the message body
new b5071b4fb5 Write up the 2.0.2 hardening for upgraders
new fe5e5eebee Do not follow redirects on a decoupled response over HTTP/2
new dc51d36ed2 Refuse a caller-supplied JNDI environment on a JMS reply
new 1c092af17f AXIS2-6062: screen JMS addresses by JNDI scheme, not by
substring
new 8a81216b1b Honour exposeServiceMetadata on the listing, WS-MEX and ping
new 515c4bc76e Answer a hidden service as though it were not deployed
new 42fdc81734 Do not trust the schema the schema compiler is compiling
new fd6366326d Escape schema values before they reach generated source
new c06f6ef551 Keep generated output inside the output directory
The 11 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
SECURITY.md | 39 ++++++-
.../axis2/schema/RestrictedSchemaURIResolver.java | 105 ++++++++++++++++++
.../apache/axis2/schema/SourceLiteralEscaper.java | 109 ++++++++++++++++++
.../src/org/apache/axis2/schema/XSD2Java.java | 15 ++-
.../apache/axis2/schema/i18n/resource.properties | 1 +
.../apache/axis2/schema/writer/CStructWriter.java | 10 +-
.../apache/axis2/schema/writer/JavaBeanWriter.java | 25 +++--
.../schema/RestrictedSchemaURIResolverTest.java | 89 +++++++++++++++
.../axis2/schema/SourceLiteralEscaperTest.java | 99 +++++++++++++++++
.../axis2/engine/ServiceDispatchingTest.java | 4 +
modules/kernel/conf/axis2.xml | 9 ++
.../AddressingResponseEndpointPolicy.java | 30 +++++
.../org/apache/axis2/deployment/axis2_default.xml | 19 +++-
.../org/apache/axis2/description/AxisService.java | 28 +++++
.../dispatchers/ContentBasedDispatchPolicy.java | 73 ++++++++++++
.../SOAPMessageBodyBasedDispatcher.java | 10 ++
.../SOAPMessageBodyBasedServiceDispatcher.java | 10 ++
.../src/org/apache/axis2/util/FileWriter.java | 17 +++
.../kernel/src/org/apache/axis2/util/XMLUtils.java | 25 +++++
.../AddressingResponseEndpointPolicyTest.java | 37 +++++++
.../apache/axis2/description/AxisServiceTest.java | 17 +++
.../SOAPMessageBodyBasedServiceDispatcherTest.java | 31 ++++++
.../axis2/util/FileWriterContainmentTest.java | 108 ++++++++++++++++++
.../org/apache/axis2/mex/MexMessageReceiver.java | 9 ++
.../org/apache/axis2/ping/PingMessageReceiver.java | 26 ++++-
.../axis2/maven/xsd2java/AbstractXSD2JavaMojo.java | 14 +++
.../h2/impl/httpclient5/H2RequestImpl.java | 9 ++
.../transport/http/HTTPTransportReceiver.java | 5 +-
.../axis2/transport/http/HTTPTransportUtils.java | 34 ++++++
.../apache/axis2/transport/http/HTTPWorker.java | 67 ++++-------
.../apache/axis2/transport/http/ListingAgent.java | 38 +++----
.../http/impl/httpclient5/RequestImpl.java | 17 +--
.../http/HiddenServiceIsIndistinguishableTest.java | 89 +++++++++++++++
.../transport/http/MetaInfResourceGuardTest.java | 62 +++++++++++
.../org/apache/axis2/transport/jms/JMSSender.java | 32 +++++-
.../transport/jms/JMSTargetAddressPolicy.java | 122 +++++++++++++++++++++
.../jms/JMSDecoupledResponseEnvironmentTest.java | 104 ++++++++++++++++++
.../transport/jms/JMSTargetAddressPolicyTest.java | 86 +++++++++++++++
modules/webapp/conf/axis2.xml | 22 +++-
src/site/markdown/release-notes/2.0.2.md | 121 +++++++++++++++++++-
systests/webapp-tests/pom.xml | 75 ++++++++++---
41 files changed, 1710 insertions(+), 132 deletions(-)
create mode 100644
modules/adb-codegen/src/org/apache/axis2/schema/RestrictedSchemaURIResolver.java
create mode 100644
modules/adb-codegen/src/org/apache/axis2/schema/SourceLiteralEscaper.java
create mode 100644
modules/adb-codegen/test/org/apache/axis2/schema/RestrictedSchemaURIResolverTest.java
create mode 100644
modules/adb-codegen/test/org/apache/axis2/schema/SourceLiteralEscaperTest.java
create mode 100644
modules/kernel/src/org/apache/axis2/dispatchers/ContentBasedDispatchPolicy.java
create mode 100644
modules/kernel/test/org/apache/axis2/util/FileWriterContainmentTest.java
create mode 100644
modules/transport/http/src/test/java/org/apache/axis2/transport/http/HiddenServiceIsIndistinguishableTest.java
create mode 100644
modules/transport/http/src/test/java/org/apache/axis2/transport/http/MetaInfResourceGuardTest.java
create mode 100644
modules/transport/jms/src/main/java/org/apache/axis2/transport/jms/JMSTargetAddressPolicy.java
create mode 100644
modules/transport/jms/src/test/java/org/apache/axis2/transport/jms/JMSDecoupledResponseEnvironmentTest.java
create mode 100644
modules/transport/jms/src/test/java/org/apache/axis2/transport/jms/JMSTargetAddressPolicyTest.java
