This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git
The following commit(s) were added to refs/heads/main by this push:
new 0aed329 Rename component from "Commons XML" to "Commons Secure XML".
0aed329 is described below
commit 0aed329601cc153550abe1ebe6d2f32f94065ed5
Author: Gary Gregory <[email protected]>
AuthorDate: Fri Aug 28 13:07:48 2026 -0400
Rename component from "Commons XML" to "Commons Secure XML".
---
.asf.yaml | 2 +-
CONTRIBUTING.md | 6 +++---
NOTICE.txt | 2 +-
README.md | 10 +++++-----
RELEASE-NOTES.txt | 12 ++++++------
SECURITY.md | 4 ++--
pom.xml | 4 ++--
src/changes/changes.xml | 4 ++--
src/main/java/org/apache/commons/xml/package-info.java | 2 +-
src/site/markdown/index.md | 6 +++---
src/site/markdown/threat_model.md | 2 +-
src/site/site.xml | 4 ++--
src/site/xdoc/download_xml.xml | 6 +++---
src/site/xdoc/issue-tracking.xml | 18 +++++++++---------
src/site/xdoc/mail-lists.xml | 16 ++++++++--------
src/site/xdoc/security.xml | 6 +++---
16 files changed, 52 insertions(+), 52 deletions(-)
diff --git a/.asf.yaml b/.asf.yaml
index 0d634d3..82dc397 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -26,7 +26,7 @@ notifications:
pullrequests_bot_codecov-commenter: [email protected]
github:
- description: "Apache Commons XML"
+ description: "Apache Commons Secure XML"
homepage: https://commons.apache.org/proper/commons-xml/
pull_requests:
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 5367393..dca8da9 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -38,7 +38,7 @@
| |
+======================================================================+
--->
-Contributing to Apache Commons XML
+Contributing to Apache Commons Secure XML
======================
Have you found a bug or have an idea for a cool new feature? Contributing code
is a great way to give something back to the open-source community.
@@ -49,7 +49,7 @@ Getting Started
+ Make sure you have a [JIRA account](https://issues.apache.org/jira/).
+ Make sure you have a [GitHub account](https://github.com/signup/free). This
is not essential, but makes providing patches much easier.
-+ If you're planning to implement a new feature it makes sense to discuss your
changes on the [dev list](https://commons.apache.org/mail-lists.html) first.
This way you can make sure you're not wasting your time on something that isn't
considered to be in Apache Commons XML's scope.
++ If you're planning to implement a new feature it makes sense to discuss your
changes on the [dev list](https://commons.apache.org/mail-lists.html) first.
This way you can make sure you're not wasting your time on something that isn't
considered to be in Apache Commons Secure XML's scope.
+ Submit a [Jira Ticket][jira] for your issue, assuming one does not already
exist.
+ Clearly describe the issue including steps to reproduce when it is a bug.
+ Make sure you fill in the earliest version that you know has the issue.
@@ -106,7 +106,7 @@ Additional Resources
--------------------
+ [Contributing patches](https://commons.apache.org/patches.html)
-+ [Apache Commons XML JIRA project page][jira]
++ [Apache Commons Secure XML JIRA project page][jira]
+ [Contributor License Agreement][cla]
+ [General GitHub documentation](https://help.github.com/)
+ [GitHub pull request
documentation](https://help.github.com/articles/creating-a-pull-request/)
diff --git a/NOTICE.txt b/NOTICE.txt
index 4d5ac01..62de302 100644
--- a/NOTICE.txt
+++ b/NOTICE.txt
@@ -1,4 +1,4 @@
-Apache Commons XML
+Apache Commons Secure XML
Copyright 2026-2026 The Apache Software Foundation
This product includes software developed at
diff --git a/README.md b/README.md
index b090935..4cf2247 100644
--- a/README.md
+++ b/README.md
@@ -40,7 +40,7 @@
| |
+======================================================================+
--->
-Apache Commons XML
+Apache Commons Secure XML
===================
[](https://github.com/apache/commons-xml/actions/workflows/maven.yml)
@@ -49,16 +49,16 @@ Apache Commons XML
[](https://github.com/apache/commons-xml/actions/workflows/codeql-analysis.yml)
[](https://api.securityscorecards.dev/projects/github.com/apache/commons-xml)
-Apache Commons XML provides secure-by-default JAXP factory creation,
abstracting over
+Apache Commons Secure XML provides secure-by-default JAXP factory creation,
abstracting over
implementation-specific XXE hardening differences between the stock JDK
and external JAXP implementations
(Android, Apache Xalan, Apache Xerces, Woodstox, Saxon-HE).
Documentation
-------------
-More information can be found on the [Apache Commons XML
homepage](https://commons.apache.org/proper/commons-xml).
+More information can be found on the [Apache Commons Secure XML
homepage](https://commons.apache.org/proper/commons-xml).
The [Javadoc](https://commons.apache.org/proper/commons-xml/apidocs) can be
browsed.
-Questions related to the usage of Apache Commons XML should be posted to the
[user mailing list](https://commons.apache.org/mail-lists.html).
+Questions related to the usage of Apache Commons Secure XML should be posted
to the [user mailing list](https://commons.apache.org/mail-lists.html).
Getting the latest release
--------------------------
@@ -105,7 +105,7 @@ See the `NOTICE.txt` file for required notices and
attributions.
Donating
--------
-You like Apache Commons XML? Then [donate back to the
ASF](https://www.apache.org/foundation/contributing.html) to support
development.
+You like Apache Commons Secure XML? Then [donate back to the
ASF](https://www.apache.org/foundation/contributing.html) to support
development.
Additional Resources
--------------------
diff --git a/RELEASE-NOTES.txt b/RELEASE-NOTES.txt
index 5ee2c2b..040e37e 100644
--- a/RELEASE-NOTES.txt
+++ b/RELEASE-NOTES.txt
@@ -14,12 +14,12 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-Apache Commons XML 1.0.0 Release Notes
+Apache Commons Secure XML 1.0.0 Release Notes
--------------------------------------
-The Apache Commons XML team is pleased to announce the release of Apache
Commons XML 1.0.0.
+The Apache Commons Secure XML team is pleased to announce the release of
Apache Commons Secure XML 1.0.0.
-Apache Commons XML provides secure-by-default JAXP factory creation,
abstracting over
+Apache Commons Secure XML provides secure-by-default JAXP factory creation,
abstracting over
implementation-specific XXE hardening differences between the stock JDK and
external JAXP implementations
(Android, Apache Xalan, Apache Xerces, Woodstox, Saxon-HE).
@@ -29,7 +29,7 @@ First release, requires Java 8 or above.
New features
------------
-* This is the first release of Apache Commons XML. Thanks to
Piotr P. Karwasz, Gary Gregory.
+* This is the first release of Apache Commons Secure XML.
Thanks to Piotr P. Karwasz, Gary Gregory.
* Add secure-by-default JAXP factory creation via
org.apache.commons.xml, donated from the copernik-xml-factory project
(https://github.com/copernik-eu/copernik-xml-factory) and covering the stock
JDK, Android, Apache Xalan, Apache Xerces, Woodstox, and Saxon-HE. Thanks to
Piotr P. Karwasz, Gary Gregory.
* COMMONSXML-9: Install a non-removable resolver floor on every resolver
channel (EntityResolver, LSResourceResolver, URIResolver, and XMLResolver),
routing caller-supplied resolvers through it as allow-lists. Thanks to Piotr P.
Karwasz, Gary Gregory.
* Harden the SAXTransformerFactory extension surface
(TransformerHandler, TemplatesHandler, and XMLFilter) and
TransformerFactory.getAssociatedStylesheet. Thanks to Piotr P. Karwasz, Gary
Gregory.
@@ -58,8 +58,8 @@ Removed
Historical list of changes:
https://commons.apache.org/proper/commons-xml//changes.html
-For complete information on Apache Commons XML, including instructions on how
to submit bug reports,
-patches, or suggestions for improvement, see the Apache Commons XML website:
+For complete information on Apache Commons Secure XML, including instructions
on how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Secure XML
website:
https://commons.apache.org/proper/commons-xml/
diff --git a/SECURITY.md b/SECURITY.md
index 3c9de48..2866c1e 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -14,8 +14,8 @@
See the License for the specific language governing permissions and
limitations under the License.
-->
-# Apache Commons XML Security Policy
+# Apache Commons Secure XML Security Policy
Read the [Apache Commons Security
Page](https://commons.apache.org/security.html).
-Read the [Apache Commons XML Threat
Model](https://github.com/apache/commons-xml/blob/main/src/site/markdown/threat_model.md).
+Read the [Apache Commons Secure XML Threat
Model](https://github.com/apache/commons-xml/blob/main/src/site/markdown/threat_model.md).
diff --git a/pom.xml b/pom.xml
index 984a6a1..7f33ba3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,10 +25,10 @@ limitations under the License.
</parent>
<artifactId>commons-xml</artifactId>
<version>1.0.0-SNAPSHOT</version>
- <name>Apache Commons XML</name>
+ <name>Apache Commons Secure XML</name>
<url>https://commons.apache.org/proper/commons-xml/</url>
<inceptionYear>2026</inceptionYear>
- <description>Apache Commons XML provides secure-by-default JAXP factory
creation, abstracting over
+ <description>Apache Commons Secure XML provides secure-by-default JAXP
factory creation, abstracting over
implementation-specific XXE hardening differences between the stock JDK
and external JAXP implementations
(Android, Apache Xalan, Apache Xerces, Woodstox, Saxon-HE).</description>
<scm>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 943f130..d4f86d5 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -28,12 +28,12 @@ The <action> type attribute can be add, update, fix, or
remove.
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://maven.apache.org/changes/2.0.0
https://maven.apache.org/xsd/changes-2.0.0.xsd";>
<properties>
- <title>Apache Commons XML Changes</title>
+ <title>Apache Commons Secure XML Changes</title>
</properties>
<body>
<release version="1.0.0" date="YYYY-MM-DD" description="First release,
requires Java 8 or above.">
<!-- SPECIAL -->
- <action type="add" dev="ggregory" due-to="Piotr P. Karwasz, Gary
Gregory">This is the first release of Apache Commons XML.</action>
+ <action type="add" dev="ggregory" due-to="Piotr P. Karwasz, Gary
Gregory">This is the first release of Apache Commons Secure XML.</action>
<!-- ADD -->
<action type="add" dev="ppkarwasz" due-to="Piotr P. Karwasz, Gary
Gregory">Add secure-by-default JAXP factory creation via
org.apache.commons.xml, donated from the copernik-xml-factory project
(https://github.com/copernik-eu/copernik-xml-factory) and covering the stock
JDK, Android, Apache Xalan, Apache Xerces, Woodstox, and Saxon-HE.</action>
<action type="add" dev="ppkarwasz" due-to="Piotr P. Karwasz, Gary
Gregory" issue="COMMONSXML-9">Install a non-removable resolver floor on every
resolver channel (EntityResolver, LSResourceResolver, URIResolver, and
XMLResolver), routing caller-supplied resolvers through it as
allow-lists.</action>
diff --git a/src/main/java/org/apache/commons/xml/package-info.java
b/src/main/java/org/apache/commons/xml/package-info.java
index aaeaf31..e61d4a0 100644
--- a/src/main/java/org/apache/commons/xml/package-info.java
+++ b/src/main/java/org/apache/commons/xml/package-info.java
@@ -15,7 +15,7 @@
* limitations under the License.
*/
/**
- * Apache Commons XML provides secure-by-default JAXP factory creation for
Java. A single method call returns a hardened JAXP factory that can be used to
+ * Apache Commons Secure XML provides secure-by-default JAXP factory creation
for Java. A single method call returns a hardened JAXP factory that can be used
to
* <em>safely</em> parse XML files.
* <p>
* Every method returns <em>new, hardened</em> factory instances. No caching
or pooling is performed; callers on a hot path are responsible for their own
diff --git a/src/site/markdown/index.md b/src/site/markdown/index.md
index f3f4960..bc57ec2 100644
--- a/src/site/markdown/index.md
+++ b/src/site/markdown/index.md
@@ -15,12 +15,12 @@ See the License for the specific language governing
permissions and
limitations under the License.
-->
-# Apache Commons XML
+# Apache Commons Secure XML
-Apache Commons XML is part of the
+Apache Commons Secure XML is part of the
[Apache Commons](https://commons.apache.org/index.html) project.
-Apache Commons XML provides secure-by-default JAXP factory creation,
+Apache Commons Secure XML provides secure-by-default JAXP factory creation,
abstracting over implementation-specific XXE hardening differences between the
stock JDK and external JAXP implementations.
diff --git a/src/site/markdown/threat_model.md
b/src/site/markdown/threat_model.md
index 7905688..a562ab3 100644
--- a/src/site/markdown/threat_model.md
+++ b/src/site/markdown/threat_model.md
@@ -14,7 +14,7 @@
See the License for the specific language governing permissions and
limitations under the License.
-->
-# Apache Commons XML Threat Model
+# Apache Commons Secure XML Threat Model
## Introduction
diff --git a/src/site/site.xml b/src/site/site.xml
index e703559..ed90bf9 100644
--- a/src/site/site.xml
+++ b/src/site/site.xml
@@ -19,11 +19,11 @@
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://maven.apache.org/SITE/2.0.0
http://maven.apache.org/xsd/site-2.0.0.xsd";
name="Apache Commons Text">
- <bannerRight name="Commons XML" href="/index.html">
+ <bannerRight name="Commons Secure XML" href="/index.html">
<image src="/images/logo.png"/>
</bannerRight>
<body>
- <menu name="Apache Commons XML">
+ <menu name="Apache Commons Secure XML">
<!-- Start: For all components. -->
<item name="About" href="index.html" />
<item name="Asking Questions" href="/mail-lists.html" />
diff --git a/src/site/xdoc/download_xml.xml b/src/site/xdoc/download_xml.xml
index 45fab44..ad1e161 100644
--- a/src/site/xdoc/download_xml.xml
+++ b/src/site/xdoc/download_xml.xml
@@ -60,11 +60,11 @@ limitations under the License.
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://maven.apache.org/XDOC/2.0
https://maven.apache.org/xsd/xdoc-2.0.xsd";>
<properties>
- <title>Download Apache Commons XML</title>
+ <title>Download Apache Commons Secure XML</title>
<author email="[email protected]">Apache Commons Team</author>
</properties>
<body>
- <section name="Download Apache Commons XML">
+ <section name="Download Apache Commons Secure XML">
<subsection name="Using a Mirror">
<p>
We recommend you use a mirror to download our release
@@ -115,7 +115,7 @@ limitations under the License.
</p>
</subsection>
</section>
- <section name="Apache Commons XML 1.0.0 (Java 8+)">
+ <section name="Apache Commons Secure XML 1.0.0 (Java 8+)">
<subsection name="Binaries">
<table>
<tr>
diff --git a/src/site/xdoc/issue-tracking.xml b/src/site/xdoc/issue-tracking.xml
index d081a0d..814453d 100644
--- a/src/site/xdoc/issue-tracking.xml
+++ b/src/site/xdoc/issue-tracking.xml
@@ -45,15 +45,15 @@ limitations under the License.
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://maven.apache.org/XDOC/2.0
https://maven.apache.org/xsd/xdoc-2.0.xsd";>
<properties>
- <title>Apache Commons XML Issue tracking</title>
+ <title>Apache Commons Secure XML Issue tracking</title>
<author email="[email protected]">Apache Commons Team</author>
</properties>
<body>
- <section name="Apache Commons XML Issue tracking">
+ <section name="Apache Commons Secure XML Issue tracking">
<p>
- Apache Commons XML uses <a href="https://issues.apache.org/jira/";>ASF
JIRA</a> for tracking issues.
- See the <a
href="https://issues.apache.org/jira/browse/COMMONSXML";>Apache Commons XML JIRA
project page</a>.
+ Apache Commons Secure XML uses <a
href="https://issues.apache.org/jira/";>ASF JIRA</a> for tracking issues.
+ See the <a
href="https://issues.apache.org/jira/browse/COMMONSXML";>Apache Commons Secure
XML JIRA project page</a>.
</p>
<p>
@@ -65,7 +65,7 @@ limitations under the License.
<p>
If you would like to report a bug, or raise an enhancement request with
- Apache Commons XML please do the following:
+ Apache Commons Secure XML please do the following:
</p>
<ol>
<li><a
href="https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&pid=${commons.jira.pid}&sorter/field=issuekey&sorter/order=DESC&status=1&status=3&status=4";>Search
existing open bugs</a>.
@@ -83,7 +83,7 @@ limitations under the License.
<ul>
<li>the more information you provide, the better we can help you</li>
<li>test cases are vital, particularly for any proposed
enhancements</li>
- <li>the developers of Apache Commons XML are all unpaid volunteers</li>
+ <li>the developers of Apache Commons Secure XML are all unpaid
volunteers</li>
</ul>
<p>
@@ -95,9 +95,9 @@ limitations under the License.
You may also find these links useful:
</p>
<ul>
- <li><a
href="https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&pid=${commons.jira.pid}&sorter/field=issuekey&sorter/order=DESC&status=1&status=3&status=4";>All
Open Apache Commons XML bugs</a></li>
- <li><a
href="https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&pid=${commons.jira.pid}&sorter/field=issuekey&sorter/order=DESC&status=5&status=6";>All
Resolved Apache Commons XML bugs</a></li>
- <li><a
href="https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&pid=${commons.jira.pid}&sorter/field=issuekey&sorter/order=DESC";>All
Apache Commons XML bugs</a></li>
+ <li><a
href="https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&pid=${commons.jira.pid}&sorter/field=issuekey&sorter/order=DESC&status=1&status=3&status=4";>All
Open Apache Commons Secure XML bugs</a></li>
+ <li><a
href="https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&pid=${commons.jira.pid}&sorter/field=issuekey&sorter/order=DESC&status=5&status=6";>All
Resolved Apache Commons Secure XML bugs</a></li>
+ <li><a
href="https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&pid=${commons.jira.pid}&sorter/field=issuekey&sorter/order=DESC";>All
Apache Commons Secure XML bugs</a></li>
</ul>
</section>
</body>
diff --git a/src/site/xdoc/mail-lists.xml b/src/site/xdoc/mail-lists.xml
index 0beecdc..24d9d9b 100644
--- a/src/site/xdoc/mail-lists.xml
+++ b/src/site/xdoc/mail-lists.xml
@@ -43,14 +43,14 @@ limitations under the License.
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://maven.apache.org/XDOC/2.0
https://maven.apache.org/xsd/xdoc-2.0.xsd";>
<properties>
- <title>Apache Commons XML Mailing Lists</title>
+ <title>Apache Commons Secure XML Mailing Lists</title>
<author email="[email protected]">Apache Commons Team</author>
</properties>
<body>
<section name="Overview">
<p>
- <a href="index.html">Apache Commons XML</a> shares mailing lists with
all the other
+ <a href="index.html">Apache Commons Secure XML</a> shares mailing
lists with all the other
<a href="https://commons.apache.org/components.html";>Commons
Components</a>.
To make it easier for people to only read messages related to
components they are interested in,
the convention in Commons is to prefix the subject line of messages
with the component's name,
@@ -60,11 +60,11 @@ limitations under the License.
<li>[xml] Problem with the ...</li>
</ul>
<p>
- Questions related to the usage of Apache Commons XML should be posted
to the
+ Questions related to the usage of Apache Commons Secure XML should be
posted to the
<a
href="https://lists.apache.org/[email protected]";>User List</a>.
<br />
The <a
href="https://lists.apache.org/[email protected]";>Developer
List</a>
- is for questions and discussion related to the development of Apache
Commons XML.
+ is for questions and discussion related to the development of Apache
Commons Secure XML.
<br />
Please do not cross-post; developers are also subscribed to the user
list.
<br />
@@ -80,9 +80,9 @@ limitations under the License.
</p>
</section>
- <section name="Apache Commons XML Mailing Lists">
+ <section name="Apache Commons Secure XML Mailing Lists">
<p>
- <strong>Please prefix the subject line of any messages for <a
href="index.html">Apache Commons XML</a>
+ <strong>Please prefix the subject line of any messages for <a
href="index.html">Apache Commons Secure XML</a>
with <i>[xml]</i></strong> - <i>thanks!</i>
<br />
<br />
@@ -103,7 +103,7 @@ limitations under the License.
<td>
<strong>Commons User List</strong>
<br /><br />
- Questions on using Apache Commons XML.
+ Questions on using Apache Commons Secure XML.
<br /><br />
</td>
<td><a
href="mailto:[email protected]";>Subscribe</a></td>
@@ -122,7 +122,7 @@ limitations under the License.
<td>
<strong>Commons Developer List</strong>
<br /><br />
- Discussion of development of Apache Commons XML.
+ Discussion of development of Apache Commons Secure XML.
<br /><br />
</td>
<td><a
href="mailto:[email protected]";>Subscribe</a></td>
diff --git a/src/site/xdoc/security.xml b/src/site/xdoc/security.xml
index de05e36..123a31a 100644
--- a/src/site/xdoc/security.xml
+++ b/src/site/xdoc/security.xml
@@ -21,11 +21,11 @@
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://maven.apache.org/XDOC/2.0
http://maven.apache.org/xsd/xdoc-2.0.xsd";>
<properties>
- <title>Apache Commons XML Security</title>
+ <title>Apache Commons Secure XML Security</title>
<author email="[email protected]">Apache Commons Team</author>
</properties>
<body>
- <section name="Apache Commons XML Security">
+ <section name="Apache Commons Secure XML Security">
<p>
For information about reporting or asking questions about security,
please see
<a href="https://commons.apache.org/security.html";>Apache Commons
Security</a>.
@@ -49,7 +49,7 @@
This section amends the <a
href="https://commons.apache.org/security.html#Security_Model";>Apache Commons
security model</a> for this component.
</p>
<p>
- Read the <a href="threat_model.html">Apache Commons XML Threat
Model</a>.
+ Read the <a href="threat_model.html">Apache Commons Secure XML Threat
Model</a>.
</p>
</section>
<section name="Security Vulnerabilities">
