This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit 7c1af152a3181bd0ca422513fa3b0f9e91e698fc Author: Gary Gregory <[email protected]> AuthorDate: Fri Aug 28 14:08:20 2026 -0400 Javadoc: "hardened" -> "secured" wording to match new class and method names. --- src/test/java/org/apache/commons/xml/XPathInputSourceTest.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/test/java/org/apache/commons/xml/XPathInputSourceTest.java b/src/test/java/org/apache/commons/xml/XPathInputSourceTest.java index 137c1ad..4cee3af 100644 --- a/src/test/java/org/apache/commons/xml/XPathInputSourceTest.java +++ b/src/test/java/org/apache/commons/xml/XPathInputSourceTest.java @@ -32,7 +32,7 @@ * * <p>The stock JDK and Apache Xalan implement the {@link org.xml.sax.InputSource}-taking {@code evaluate} entry points by provisioning an internal document * parser that {@code FEATURE_SECURE_PROCESSING} on the {@link XPathFactory} does not reach. The {@link SecureXPathFactory} wrapper parses the input - * through a hardened {@code DocumentBuilder} instead, so the external reference resolves to empty on the floor, while the + * through a secure {@code DocumentBuilder} instead, so the external reference resolves to empty on the floor, while the * evaluation itself still works. Tagged {@code xpath}, so it runs under test-stockjdk, test-jdk-xerces, test-xalan and test-xalan-xerces; the Saxon engine takes the separate * {@code SaxonProvider} path covered by {@code SaxonXPathExternalCallsTest}.</p> */ @@ -58,7 +58,7 @@ void hardenedXPathEvaluateDoesNotLeak() throws Exception { @Test void hardenedXPathEvaluatesPlainDocument() throws Exception { - // Positive control: the hardened pre-parse still evaluates an entity-free document end to end. + // Positive control: the secure pre-parse still evaluates an entity-free document end to end. final String result = SecureXPathFactory.newInstance().newXPath().evaluate(EXPRESSION, AttackTestSupport.inputSource(AttackTestSupport.xmlBody("plain text"))); assertEquals("plain text", result, "hardened XPath should evaluate a plain document");
