This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
from 451ae68 Create README.md
new d1d360b Initial implementation
new ecf0a52 feat: provide simple web page
new 73fa427 feat: add `AGENTS.md` for basic coding rules
new 2b7f52e feat: add public API for hardened JAXP factories
new b913da1 feat: add stock JDK provider
new 6696dbb feat: allow XmlProvider to return wrappers
new b470395 fix: internal providers don't need to be registered
new e9c150c feat: add provider for Xerces
new 2f07b49 feat: add provider for Woodstox
new 2c136e7 feat: add provider for Saxon-HE
new 9157c8e feat: remove UnsupportedXmlImplementationException
new 3c596a6 feat: remove ProviderRegistry abstraction
new 0eeb9c2 feat: add "Java CI" workflow
new f0ad0bc feat: add "CodeQL" workflow
new 18e9233 feat: add Dependabot configuration
new 4a2308c fix: CodeQL branch
new fb3d24f fix: allow external access via system properties
new 32a04cb fix: build creates Maven cache
new 77307b5 fix: always use default parsers in stock JDK
new 4522e06 fix: make ExternalStylesheetTest more reliable
new a82ec99 fix: reliability of TraX stylesheet and XPath expression tests
new e91fb9d fix: SaxonProvider
new 510d8df fix: update build job name
new 11fa81c fix: `runner` context not available in `name`
new 02ac2ef fix: spacing
new fca53ed fix: make ExternalSchemaTest more reliable (#1)
new f847a03 fix: make DTD-based attack tests more reliable
new c090db2 Add explicit version for Moditect plugin (#3)
new be1cb5d Tag tests according to JAXP interface (#4)
new 0abe0ec Relax restrictions on DOCTYPE (#5)
new edcc84a Move all classes to single package
new a9202c9 Remove the `XmlProvider` SPI (#7)
new 115fe60 Add support for Xalan (#8)
new bb1610a Adds support for Android (#9)
new 9d485e3 Add Android tests and rationalise test suite (#10)
new 9591f9f Align StAX hardening with the SAX/DOM external-subset
contract (#11)
new cd8346e Change project coordinates to
`eu.copernik:copernik-xml-factory` (#12)
new e09b77f build(deps): bump org.apache.commons:commons-parent from 98
to 99 (#13)
new ee7cca1 build(deps-dev): bump
org.sonatype.central:central-publishing-maven-plugin (#14)
new cce2dc6 build(deps-dev): bump org.codehaus.mojo:flatten-maven-plugin
(#15)
new f3a46bb Prepare release `0.1.0` (#16)
new bc66dc2 Fix release artifacts for Maven Central (#17)
new bdabbca Fix malformed paragraph tag in schema factory Javadoc (#18)
new 7bd2e89 Skip the inherited source-release assembly (#19)
new 3199dd0 Link to the published Javadoc from the README (#20)
new f1d7c47 Next development cycle (#22)
new d50128c Fix JPMS and OSGi resolution of optional dependencies (#23)
new e646abc Prepare release 0.1.1 (#24)
new d7b976c Next development cycle (#25)
new 5cdc5b1 Repackage as org.apache.commons:commons-xml
The 50 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.asf.yaml | 30 +
.gitattributes | 24 +
.github/GH-ROBOTS.txt | 19 +
.github/dependabot.yml | 28 +
.github/pull_request_template.md | 30 +
.github/workflows/codeql-analysis.yml | 35 +
.github/workflows/dependency-review.yml | 31 +
.github/workflows/maven.yml | 201 +++++
.github/workflows/scorecards-analysis.yml | 69 ++
.gitignore | 23 +-
AGENTS.md | 55 ++
NOTICE.txt | 5 +
README.md | 202 ++++-
android-tests/.gitignore | 4 +
android-tests/README.md | 60 ++
android-tests/build.gradle.kts | 105 +++
android-tests/gradle.properties | 18 +
android-tests/gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 43583 bytes
.../gradle/wrapper/gradle-wrapper.properties | 22 +
android-tests/gradlew | 252 ++++++
android-tests/gradlew.bat | 94 +++
android-tests/settings.gradle.kts | 34 +
android-tests/src/main/AndroidManifest.xml | 19 +
pom.xml | 391 +++++++++
src/changes/changes.xml | 41 +
.../org/apache/commons/xml/AndroidProvider.java | 199 +++++
.../xml/DelegatingDocumentBuilderFactory.java | 140 ++++
.../apache/commons/xml/DelegatingSAXParser.java | 88 ++
.../commons/xml/DelegatingSAXParserFactory.java | 94 +++
.../commons/xml/DelegatingSchemaFactory.java | 95 +++
.../apache/commons/xml/DelegatingTemplates.java | 46 ++
.../apache/commons/xml/DelegatingTransformer.java | 104 +++
.../commons/xml/DelegatingTransformerFactory.java | 134 +++
.../apache/commons/xml/DelegatingXMLReader.java | 112 +++
.../org/apache/commons/xml/HardeningException.java | 45 +
.../commons/xml/HardeningSAXParserFactory.java | 50 ++
.../org/apache/commons/xml/HardeningSchema.java | 52 ++
.../apache/commons/xml/HardeningSchemaFactory.java | 80 ++
.../org/apache/commons/xml/HardeningTemplates.java | 53 ++
.../apache/commons/xml/HardeningTransformer.java | 44 +
.../commons/xml/HardeningTransformerFactory.java | 90 ++
.../org/apache/commons/xml/HardeningValidator.java | 98 +++
.../java/org/apache/commons/xml/JaxpSetters.java | 120 +++
src/main/java/org/apache/commons/xml/Limits.java | 345 ++++++++
.../java/org/apache/commons/xml/Resolvers.java | 143 ++++
.../java/org/apache/commons/xml/SaxonProvider.java | 113 +++
.../org/apache/commons/xml/StockJdkProvider.java | 156 ++++
.../org/apache/commons/xml/WoodstoxProvider.java | 88 ++
.../java/org/apache/commons/xml/XalanProvider.java | 73 ++
.../org/apache/commons/xml/XercesProvider.java | 181 +++++
.../java/org/apache/commons/xml/XmlFactories.java | 299 +++++++
src/site/markdown/index.md | 146 ++++
src/site/resources/profile.japicmp | 14 +
src/site/site.xml | 29 +
.../org/apache/commons/xml/AttackTestSupport.java | 904 +++++++++++++++++++++
.../org/apache/commons/xml/BillionLaughsTest.java | 260 ++++++
.../org/apache/commons/xml/DoctypeOnlyTest.java | 103 +++
.../org/apache/commons/xml/ExternalDtdTest.java | 156 ++++
.../commons/xml/ExternalGeneralEntityTest.java | 158 ++++
.../commons/xml/ExternalParameterEntityTest.java | 246 ++++++
.../java/org/apache/commons/xml/NoDoctypeTest.java | 93 +++
.../commons/xml/SaxonXPathExternalCallsTest.java | 147 ++++
.../org/apache/commons/xml/SchemaImportTest.java | 41 +
.../org/apache/commons/xml/SchemaIncludeTest.java | 41 +
.../org/apache/commons/xml/SchemaRedefineTest.java | 41 +
.../apache/commons/xml/TemplatesImportTest.java | 34 +
.../apache/commons/xml/TemplatesIncludeTest.java | 34 +
.../commons/xml/TransformerDocumentTest.java | 34 +
.../xml/UnsupportedXmlImplementationTest.java | 74 ++
.../org/apache/commons/xml/XmlFactoriesTest.java | 122 +++
.../org/apache/commons/xml/DescriptorIT.java | 159 ++++
src/test/resources/leaked/included.xsd | 11 +
src/test/resources/leaked/included.xsl | 6 +
src/test/resources/leaked/referenced.dtd | 2 +
src/test/resources/leaked/referenced.json | 3 +
src/test/resources/leaked/referenced.txt | 2 +
src/test/resources/leaked/referenced.xml | 3 +
src/test/resources/leaked/with-document.xsl | 6 +
src/test/resources/leaked/with-import.xsd | 15 +
src/test/resources/leaked/with-import.xsl | 4 +
src/test/resources/leaked/with-include.xsd | 15 +
src/test/resources/leaked/with-include.xsl | 4 +
src/test/resources/leaked/with-redefine.xsd | 19 +
83 files changed, 7734 insertions(+), 26 deletions(-)
create mode 100644 .asf.yaml
create mode 100644 .gitattributes
create mode 100644 .github/GH-ROBOTS.txt
create mode 100644 .github/dependabot.yml
create mode 100644 .github/pull_request_template.md
create mode 100644 .github/workflows/codeql-analysis.yml
create mode 100644 .github/workflows/dependency-review.yml
create mode 100644 .github/workflows/maven.yml
create mode 100644 .github/workflows/scorecards-analysis.yml
create mode 100644 AGENTS.md
create mode 100644 NOTICE.txt
create mode 100644 android-tests/.gitignore
create mode 100644 android-tests/README.md
create mode 100644 android-tests/build.gradle.kts
create mode 100644 android-tests/gradle.properties
create mode 100644 android-tests/gradle/wrapper/gradle-wrapper.jar
create mode 100644 android-tests/gradle/wrapper/gradle-wrapper.properties
create mode 100755 android-tests/gradlew
create mode 100644 android-tests/gradlew.bat
create mode 100644 android-tests/settings.gradle.kts
create mode 100644 android-tests/src/main/AndroidManifest.xml
create mode 100644 pom.xml
create mode 100644 src/changes/changes.xml
create mode 100644 src/main/java/org/apache/commons/xml/AndroidProvider.java
create mode 100644
src/main/java/org/apache/commons/xml/DelegatingDocumentBuilderFactory.java
create mode 100644
src/main/java/org/apache/commons/xml/DelegatingSAXParser.java
create mode 100644
src/main/java/org/apache/commons/xml/DelegatingSAXParserFactory.java
create mode 100644
src/main/java/org/apache/commons/xml/DelegatingSchemaFactory.java
create mode 100644
src/main/java/org/apache/commons/xml/DelegatingTemplates.java
create mode 100644
src/main/java/org/apache/commons/xml/DelegatingTransformer.java
create mode 100644
src/main/java/org/apache/commons/xml/DelegatingTransformerFactory.java
create mode 100644
src/main/java/org/apache/commons/xml/DelegatingXMLReader.java
create mode 100644 src/main/java/org/apache/commons/xml/HardeningException.java
create mode 100644
src/main/java/org/apache/commons/xml/HardeningSAXParserFactory.java
create mode 100644 src/main/java/org/apache/commons/xml/HardeningSchema.java
create mode 100644
src/main/java/org/apache/commons/xml/HardeningSchemaFactory.java
create mode 100644 src/main/java/org/apache/commons/xml/HardeningTemplates.java
create mode 100644
src/main/java/org/apache/commons/xml/HardeningTransformer.java
create mode 100644
src/main/java/org/apache/commons/xml/HardeningTransformerFactory.java
create mode 100644 src/main/java/org/apache/commons/xml/HardeningValidator.java
create mode 100644 src/main/java/org/apache/commons/xml/JaxpSetters.java
create mode 100644 src/main/java/org/apache/commons/xml/Limits.java
create mode 100644 src/main/java/org/apache/commons/xml/Resolvers.java
create mode 100644 src/main/java/org/apache/commons/xml/SaxonProvider.java
create mode 100644 src/main/java/org/apache/commons/xml/StockJdkProvider.java
create mode 100644 src/main/java/org/apache/commons/xml/WoodstoxProvider.java
create mode 100644 src/main/java/org/apache/commons/xml/XalanProvider.java
create mode 100644 src/main/java/org/apache/commons/xml/XercesProvider.java
create mode 100644 src/main/java/org/apache/commons/xml/XmlFactories.java
create mode 100644 src/site/markdown/index.md
create mode 100644 src/site/resources/profile.japicmp
create mode 100644 src/site/site.xml
create mode 100644 src/test/java/org/apache/commons/xml/AttackTestSupport.java
create mode 100644 src/test/java/org/apache/commons/xml/BillionLaughsTest.java
create mode 100644 src/test/java/org/apache/commons/xml/DoctypeOnlyTest.java
create mode 100644 src/test/java/org/apache/commons/xml/ExternalDtdTest.java
create mode 100644
src/test/java/org/apache/commons/xml/ExternalGeneralEntityTest.java
create mode 100644
src/test/java/org/apache/commons/xml/ExternalParameterEntityTest.java
create mode 100644 src/test/java/org/apache/commons/xml/NoDoctypeTest.java
create mode 100644
src/test/java/org/apache/commons/xml/SaxonXPathExternalCallsTest.java
create mode 100644 src/test/java/org/apache/commons/xml/SchemaImportTest.java
create mode 100644 src/test/java/org/apache/commons/xml/SchemaIncludeTest.java
create mode 100644 src/test/java/org/apache/commons/xml/SchemaRedefineTest.java
create mode 100644
src/test/java/org/apache/commons/xml/TemplatesImportTest.java
create mode 100644
src/test/java/org/apache/commons/xml/TemplatesIncludeTest.java
create mode 100644
src/test/java/org/apache/commons/xml/TransformerDocumentTest.java
create mode 100644
src/test/java/org/apache/commons/xml/UnsupportedXmlImplementationTest.java
create mode 100644 src/test/java/org/apache/commons/xml/XmlFactoriesTest.java
create mode 100644 src/test/java11/org/apache/commons/xml/DescriptorIT.java
create mode 100644 src/test/resources/leaked/included.xsd
create mode 100644 src/test/resources/leaked/included.xsl
create mode 100644 src/test/resources/leaked/referenced.dtd
create mode 100644 src/test/resources/leaked/referenced.json
create mode 100644 src/test/resources/leaked/referenced.txt
create mode 100644 src/test/resources/leaked/referenced.xml
create mode 100644 src/test/resources/leaked/with-document.xsl
create mode 100644 src/test/resources/leaked/with-import.xsd
create mode 100644 src/test/resources/leaked/with-import.xsl
create mode 100644 src/test/resources/leaked/with-include.xsd
create mode 100644 src/test/resources/leaked/with-include.xsl
create mode 100644 src/test/resources/leaked/with-redefine.xsd
