This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a change to branch feature/ci-matrix
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
from 1169468 fix: add `|| false` to `continue-on-error`
add b2cc824 Bump github/codeql-action from 4.36.3 to 4.37.0
add 44c927a Fix XInclude hardening: block at resolver level
add 684a7c0 Simplify XInclude hardening: rely on the deny-all resolver
floor
add 50907a1 Tidy XIncludeTest: shared fixtures and correct XInclude gate
add 35de397 Assert exact resolved content in XInclude allow-list tests
add 48d3764 Drop redundant ACCESS_EXTERNAL_DTD from the transformer
hardening
add 18e600a fix: remove copyright notice line (ppkarwasz)
add ee98041 Remove copyright attribution line (thientd)
add ecda422 Use value for `XmlFactories.harden`
add 737180a Merge pull request #21 from ppkarwasz/fix/xinclude
add 7202037 Merge remote-tracking branch 'apache/main' into
feature/ci-matrix
No new revisions were added by this update.
Summary of changes:
.github/workflows/scorecards-analysis.yml | 2 +-
.../commons/xml/DocumentBuilderHardener.java | 18 +-
.../java/org/apache/commons/xml/JaxpSetters.java | 25 +-
.../org/apache/commons/xml/SAXParserHardener.java | 18 +-
.../apache/commons/xml/TransformerHardener.java | 14 +-
.../java/org/apache/commons/xml/XmlFactories.java | 18 +-
.../java/org/apache/commons/xml/XIncludeTest.java | 416 +++++++++++++++++++++
7 files changed, 450 insertions(+), 61 deletions(-)
create mode 100644 src/test/java/org/apache/commons/xml/XIncludeTest.java
