This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
from b2cc824 Bump github/codeql-action from 4.36.3 to 4.37.0
add 44c927a Fix XInclude hardening: block at resolver level
add 684a7c0 Simplify XInclude hardening: rely on the deny-all resolver
floor
add 50907a1 Tidy XIncludeTest: shared fixtures and correct XInclude gate
add 35de397 Assert exact resolved content in XInclude allow-list tests
add 48d3764 Drop redundant ACCESS_EXTERNAL_DTD from the transformer
hardening
add 18e600a fix: remove copyright notice line (ppkarwasz)
add ee98041 Remove copyright attribution line (thientd)
add ecda422 Use value for `XmlFactories.harden`
new 737180a Merge pull request #21 from ppkarwasz/fix/xinclude
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../commons/xml/DocumentBuilderHardener.java | 18 +-
.../java/org/apache/commons/xml/JaxpSetters.java | 25 +-
.../org/apache/commons/xml/SAXParserHardener.java | 18 +-
.../apache/commons/xml/TransformerHardener.java | 14 +-
.../java/org/apache/commons/xml/XmlFactories.java | 18 +-
.../java/org/apache/commons/xml/XIncludeTest.java | 416 +++++++++++++++++++++
6 files changed, 449 insertions(+), 60 deletions(-)
create mode 100644 src/test/java/org/apache/commons/xml/XIncludeTest.java
