You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2026/08/28 18:18:21 UTC

(commons-xml) 31/38: Javadoc: "hardened" -> "secured" wording to match new class and method names.

This is an automated email from the ASF dual-hosted git repository.

garydgregory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git

commit 5ebc93f6fbe91f982489384eafec3015a15a00dd
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Fri Aug 28 14:08:09 2026 -0400

    Javadoc: "hardened" -> "secured" wording to match new class and method
    names.
---
 src/test/java/org/apache/commons/xml/XMLFilterTest.java | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/test/java/org/apache/commons/xml/XMLFilterTest.java b/src/test/java/org/apache/commons/xml/XMLFilterTest.java
index 0a33878..98a741c 100644
--- a/src/test/java/org/apache/commons/xml/XMLFilterTest.java
+++ b/src/test/java/org/apache/commons/xml/XMLFilterTest.java
@@ -35,7 +35,7 @@
 import org.xml.sax.XMLFilter;
 
 /**
- * {@link XMLFilter} products of the hardened factory: the input document is parsed by a hardened reader (never a self-provisioned permissive one), and the
+ * {@link XMLFilter} products of the secure factory: the input document is parsed by a secure reader (never a self-provisioned permissive one), and the
  * transformation runs on the resolver floor, so neither an external entity in the input nor a stylesheet's runtime {@code document()} fetches. The
  * unconfigured controls prove both vectors leak without the hardening. The {@code Templates} overload doubles as a regression test for handing the factory a
  * wrapped {@code Templates}.
@@ -82,7 +82,7 @@ void hardenedFilterDoesNotLeakDocument() throws Exception {
 
     @Test
     void hardenedFilterDoesNotLeakExternalEntity() throws Exception {
-        // The f003 vector: with no caller-set parent, the input must be parsed by a hardened reader, not a self-provisioned permissive one.
+        // The f003 vector: with no caller-set parent, the input must be parsed by a secure reader, not a self-provisioned permissive one.
         final XMLFilter filter = SaxSurfaceTestSupport.hardenedFactory().newXMLFilter(AttackTestSupport.streamSource(IDENTITY_XSLT));
         assertFalse(filterAndCapture(filter, entityPayload()).contains(AttackTestSupport.LEAKED_MARKER), "external entity through XMLFilter leaked");
     }