You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@commons.apache.org by se...@apache.org on 2023/04/20 15:43:02 UTC

svn commit: r1909293 - /commons/cms-site/trunk/content/xdoc/security.xml

Author: sebb
Date: Thu Apr 20 15:43:02 2023
New Revision: 1909293

URL: http://svn.apache.org/viewvc?rev=1909293&view=rev
Log:
+=Note re security model

Modified:
    commons/cms-site/trunk/content/xdoc/security.xml

Modified: commons/cms-site/trunk/content/xdoc/security.xml
URL: http://svn.apache.org/viewvc/commons/cms-site/trunk/content/xdoc/security.xml?rev=1909293&r1=1909292&r2=1909293&view=diff
==============================================================================
--- commons/cms-site/trunk/content/xdoc/security.xml (original)
+++ commons/cms-site/trunk/content/xdoc/security.xml Thu Apr 20 15:43:02 2023
@@ -63,6 +63,15 @@
 
       </section>
 
+      <section name="Security Model">
+        <p>The Commons libraries are low-level libraries that are
+          typically designed to work with input that is either trusted
+          or validated/sanitized by the application using the library.
+          It is not safe to provide possibly-malicious input to
+          Commons libraries unless otherwise specified.</p>
+
+      </section>
+
       <section name="Known Security Vulnerabilities">
         <p>Known security vulnerabilities fixed in released versions of
           Apache Commons components are listed in specific pages for