You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by jd...@apache.org on 2026/09/11 14:05:32 UTC
(grails-core) branch fix/xml-parser-hardening updated (890833e9c4 -> 99a4604dbc)
This is an automated email from the ASF dual-hosted git repository.
jdaugherty pushed a change to branch fix/xml-parser-hardening
in repository https://gitbox.apache.org/repos/asf/grails-core.git
from 890833e9c4 strictly parse plugin config always
add 0d5b31673b Validate dynamic finder and HQL list sort property names
add 035f9197fa Address review feedback on sort argument validation
add 91885f07ed fix: trim and validate DynamicFinder order direction
add 42e951fc1c Merge branch '8.0.x' into fix/dynamic-finder-sort-validation
add 9cd088f435 feedback: Validate sort arguments on every query entry point
add a7647b2731 Merge branch '8.0.x' into fix/dynamic-finder-sort-validation
add c35e0bb5ea Merge pull request #16333 from apache/fix/dynamic-finder-sort-validation
add dafdf8acdc Merge remote-tracking branch 'upstream/8.0.x' into fix/xml-parser-hardening
add 99a4604dbc test XML.parse refuses a declared DOCTYPE through every overload
No new revisions were added by this update.
Summary of changes:
.agents/skills/grails-8-upgrade/SKILL.md | 1 +
.../groovy/grails/converters/XMLParseSpec.groovy | 73 ++++
.../orm/hibernate/cfg/GrailsHibernateUtil.java | 19 +-
.../query/AbstractHibernateCriteriaBuilder.java | 9 +-
.../hibernate/query/GrailsHibernateQueryUtils.java | 32 +-
.../gorm/tests/SortArgumentValidationSpec.groovy | 206 +++++++++++
.../docs/src/docs/asciidoc/querying/finders.adoc | 2 +
.../groovy/grails/orm/CriteriaMethodInvoker.java | 17 +-
.../orm/hibernate/query/HqlListQueryBuilder.java | 40 ++-
.../gorm/tests/SortArgumentValidationSpec.groovy | 389 +++++++++++++++++++++
.../grails/orm/CriteriaMethodInvokerSpec.groovy | 45 +++
.../hibernate/query/HqlListQueryBuilderSpec.groovy | 125 +++++++
.../docs/src/docs/asciidoc/querying/finders.adoc | 2 +
.../datastore/gorm/finders/DynamicFinder.java | 176 +++++++---
.../datastore/gorm/finders/ListOrderByFinder.java | 11 +-
.../gorm/finders/AbstractFinderSpec.groovy | 27 ++
.../gorm/finders/DynamicFinderCoverageSpec.groovy | 233 +++++++++++-
.../data/testing/tck/tests/ListOrderBySpec.groovy | 22 ++
.../datastore/mapping/reflect/NameUtils.java | 36 ++
.../datastore/mapping/reflect/NameUtilsSpec.groovy | 52 +++
.../src/en/guide/upgrading/upgrading80x.adoc | 29 +-
.../src/en/ref/Domain Classes/createCriteria.adoc | 2 +
grails-doc/src/en/ref/Domain Classes/list.adoc | 4 +-
.../src/en/ref/Domain Classes/listOrderBy.adoc | 2 +-
24 files changed, 1471 insertions(+), 83 deletions(-)
create mode 100644 grails-converters/src/test/groovy/grails/converters/XMLParseSpec.groovy
create mode 100644 grails-data-hibernate5/core/src/test/groovy/grails/gorm/tests/SortArgumentValidationSpec.groovy
create mode 100644 grails-data-hibernate7/core/src/test/groovy/grails/gorm/tests/SortArgumentValidationSpec.groovy