This is an automated email from the ASF dual-hosted git repository.

garydgregory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/commons-xml.git

commit 8744754dc35d78914bcb3173f83ca9e84a3db92f
Author: Gary Gregory <[email protected]>
AuthorDate: Fri Aug 28 17:40:51 2026 -0400

    Javadoc: Use "secure" terminology.
---
 src/test/java/org/apache/commons/xml/BillionLaughsTest.java | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/test/java/org/apache/commons/xml/BillionLaughsTest.java 
b/src/test/java/org/apache/commons/xml/BillionLaughsTest.java
index 30416b5..0f058d2 100644
--- a/src/test/java/org/apache/commons/xml/BillionLaughsTest.java
+++ b/src/test/java/org/apache/commons/xml/BillionLaughsTest.java
@@ -39,7 +39,7 @@
  *   <li>{@link #CONTENT_120K} ({@code 120,000}) on the JVM: above every JVM 
parser default.</li>
  *   <li>{@link #CONTENT_9M} ({@code 9,000,000}) on Android: above libexpat's 
8 MiB billion-laughs activation threshold, the only defense there since the 
limit is
  *       not configurable. For that same reason the positive controls do not 
run on Android (see {@link #assumeEntityLimitConfigurable()}): a payload the 
secure test
- *       blocks cannot be parsed even without hardening.</li>
+ *       blocks cannot be parsed even without securing.</li>
  * </ul>
  *
  * <p>The XSLT payload spreads those same {@code 120,000} expansions over two 
literal result elements with content {@link #CONTENT_60K} rather than one text 
node,
@@ -75,7 +75,7 @@ class BillionLaughsTest {
      *
      * <p>The controls prove the secure test blocked a payload that would 
otherwise parse, so they must use the very payload the secure test blocks.
      * On Android the entity-expansion limit is not configurable (libexpat's 
billion-laughs check cannot be lifted), so that payload
-     * cannot be parsed even without hardening, leaving nothing to prove.</p>
+     * cannot be parsed even without securing, leaving nothing to prove.</p>
      */
     private static void assumeEntityLimitConfigurable() {
         Assumptions.assumeFalse(AttackTestSupport.IS_ANDROID, "Skipped on 
Android: the entity-expansion limit is not configurable");

Reply via email to