This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit 3aab30a9e5b7cdc2a6f723d77d3d698a3074f15a Author: Gary Gregory <[email protected]> AuthorDate: Fri Aug 28 13:50:48 2026 -0400 Javadoc: "hardened" -> "secured" wording to match new class and method names. --- .../java/org/apache/commons/xml/ExternalParameterEntityTest.java | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/test/java/org/apache/commons/xml/ExternalParameterEntityTest.java b/src/test/java/org/apache/commons/xml/ExternalParameterEntityTest.java index 5a079b3..1c6b95f 100644 --- a/src/test/java/org/apache/commons/xml/ExternalParameterEntityTest.java +++ b/src/test/java/org/apache/commons/xml/ExternalParameterEntityTest.java @@ -36,13 +36,13 @@ * * <p>The wrapper declares a parameter entity {@code %xxe;} pointing at {@code src/test/resources/leaked/referenced.dtd} and immediately references it in the * internal subset; once expanded, the entity declarations from {@code referenced.dtd} (in particular {@code <!ENTITY leaked "...">}) become part of the - * document's DTD. Each wrapper body then references {@code &leaked;}, and a hardened parser resolves the parameter-entity expansion to empty, which leaves - * {@code &leaked;} undeclared. This is the one payload in the suite with a genuinely undeclared entity, so the hardened outcome is dual: the parser either + * document's DTD. Each wrapper body then references {@code &leaked;}, and a secure parser resolves the parameter-entity expansion to empty, which leaves + * {@code &leaked;} undeclared. This is the one payload in the suite with a genuinely undeclared entity, so the secure outcome is dual: the parser either * skips the undefined reference (no leak) or rejects it (per XML 1.0 section 4.1 the reference is an unreported validity constraint here, but the JDK's parser * reports it as a well-formedness error and Woodstox rejects undeclared references unconditionally). Either way the external DTD is never fetched. An * unconfigured parser fetches and resolves it, and the parse succeeds.</p> * - * <p>Each parser type is exercised twice as a pair (unconfigured factory, expected to parse; hardened factory, expected to block or complete without leaked + * <p>Each parser type is exercised twice as a pair (unconfigured factory, expected to parse; secure factory, expected to block or complete without leaked * content):</p> * * <ul>
