This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
from 8d9d199 Bump github/codeql-action/init from 4.37.7 to 4.37.8
add c9b6172 fix: harden getAssociatedStylesheet on Xalan via a DOMSource
add 146045b Merge remote-tracking branch 'apache/main' into
fix/associated-stylesheet-domsource
add 1d42c4f Merge branch 'main' into fix/associated-stylesheet-domsource
new c78c508 Merge pull request #46 from
ppkarwasz/fix/associated-stylesheet-domsource
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../commons/xml/HardeningTransformerFactory.java | 48 ++++++++++++-
.../commons/xml/AssociatedStylesheetTest.java | 84 ++++++++++++++++++++++
.../apache/commons/xml/ShadingFootprintTest.java | 10 +--
...erenced.xml => associated-stylesheet-plain.xml} | 3 +-
.../resources/leaked/associated-stylesheet.xml | 5 ++
5 files changed, 144 insertions(+), 6 deletions(-)
create mode 100644
src/test/java/org/apache/commons/xml/AssociatedStylesheetTest.java
copy src/test/resources/leaked/{referenced.xml =>
associated-stylesheet-plain.xml} (57%)
create mode 100644 src/test/resources/leaked/associated-stylesheet.xml
