This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
The following commit(s) were added to refs/heads/main by this push:
new 260e41f Javadoc: "hardened" -> "secured" wording to match new class
and method names.
260e41f is described below
commit 260e41ff4ef810ea1782e4853bdf7d254f8322ef
Author: Gary Gregory <[email protected]>
AuthorDate: Fri Aug 28 13:48:02 2026 -0400
Javadoc: "hardened" -> "secured" wording to match new class and method
names.
---
src/test/java/org/apache/commons/xml/AssociatedStylesheetTest.java | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/test/java/org/apache/commons/xml/AssociatedStylesheetTest.java
b/src/test/java/org/apache/commons/xml/AssociatedStylesheetTest.java
index 4df4615..036228d 100644
--- a/src/test/java/org/apache/commons/xml/AssociatedStylesheetTest.java
+++ b/src/test/java/org/apache/commons/xml/AssociatedStylesheetTest.java
@@ -33,8 +33,8 @@
* Checks that {@code getAssociatedStylesheet} scans for {@code
xml-stylesheet} PIs without fetching an external DTD declared in the document
prolog.
*
* <p>The PI scan parses the prolog, where a {@code DOCTYPE} with an external
subset is processed before the root element. On Apache Xalan the scan runs on a
- * reader the engine provisions itself, ignoring a hardened reader passed in a
{@link javax.xml.transform.sax.SAXSource} (XALANJ-2849); the wrapper works
around
- * that by handing Xalan a {@code DOMSource} it pre-parsed through a hardened
{@code DocumentBuilder}. The JDK's XSLTC honors the hardened reader directly.
Either
+ * reader the engine provisions itself, ignoring a secure reader passed in a
{@link javax.xml.transform.sax.SAXSource} (XALANJ-2849); the wrapper works
around
+ * that by handing Xalan a {@code DOMSource} it pre-parsed through a secure
{@code DocumentBuilder}. The JDK's XSLTC honors the secure reader directly.
Either
* way the external DTD resolves to empty instead of being fetched. Tagged
{@code trax}, so it runs on the stock JDK, Apache Xalan, Saxon, and the Android
* runtime.</p>
*/
@@ -57,7 +57,7 @@ private static TransformerFactory hardenedFactory() {
@Test
void hardenedGetAssociatedStylesheetIgnoresExternalDtd() throws
TransformerConfigurationException {
- // The prolog declares an unreachable external DTD; the hardened parse
resolves it to empty rather than fetching it, so the PI scan completes and finds
+ // The prolog declares an unreachable external DTD; the secure parse
resolves it to empty rather than fetching it, so the PI scan completes and finds
// the stylesheet instead of throwing on a fetch. (The returned
Source's shape is engine-specific: XSLTC and Xalan point it at included.xsl,
while Saxon
// resolves the href through its own floor and returns an empty
source; both mean the scan ran without fetching the DTD.)
final Source associated = hardenedFactory()
