You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@commons.apache.org by pk...@apache.org on 2026/08/18 15:10:07 UTC

(commons-xml) branch remove/harden-source updated (751cb71 -> b3b38c4)

This is an automated email from the ASF dual-hosted git repository.

ppkarwasz pushed a change to branch remove/harden-source
in repository https://gitbox.apache.org/repos/asf/commons-xml.git


    from 751cb71  Remove the harden(XMLReader) and harden(Source) methods from the public API
     add 3337304  Merge pull request #30 from apache/feature/ignore-all-resolver-floors
     add ea63d03  Treat caller-supplied parser instances as trusted configuration
     add a62d2fc  Merge pull request #29 from apache/feature/threat-model-caller-supplied-parsers
     add 4bcfdae  Configure PR buttons
     add be0343d  Merge pull request #33 from ppkarwasz/chore/asf-yaml
     add 9c84b10  fix: Restore hardened state after reset() (#36)
     add b3b38c4  Merge branch 'main' into remove/harden-source

No new revisions were added by this update.

Summary of changes:
 .asf.yaml                                          |  16 ++-
 .../org/apache/commons/xml/HardeningSAXParser.java |  14 ++-
 .../apache/commons/xml/HardeningTransformer.java   |  19 ++--
 .../org/apache/commons/xml/HardeningValidator.java |   4 +-
 src/site/markdown/threat_model.md                  |  28 ++++-
 .../org/apache/commons/xml/ResetHardeningTest.java | 118 +++++++++++++++++++++
 6 files changed, 182 insertions(+), 17 deletions(-)
 create mode 100644 src/test/java/org/apache/commons/xml/ResetHardeningTest.java