This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-xml.git
commit 944a41845ad1b665f2779aad50bd2e7afbf39010 Author: Gary Gregory <[email protected]> AuthorDate: Fri Aug 28 14:00:19 2026 -0400 Javadoc: "hardened" -> "secured" wording to match new class and method names. --- src/test/java/org/apache/commons/xml/SchemaLocationSaxTest.java | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/test/java/org/apache/commons/xml/SchemaLocationSaxTest.java b/src/test/java/org/apache/commons/xml/SchemaLocationSaxTest.java index 1a682b7..0cee73b 100644 --- a/src/test/java/org/apache/commons/xml/SchemaLocationSaxTest.java +++ b/src/test/java/org/apache/commons/xml/SchemaLocationSaxTest.java @@ -35,12 +35,12 @@ import org.xml.sax.helpers.DefaultHandler; /** - * Checks that a hardened {@link SAXParserFactory} performing JAXP 1.2 XSD validation does not fetch an external schema named by an + * Checks that a secure {@link SAXParserFactory} performing JAXP 1.2 XSD validation does not fetch an external schema named by an * {@code xsi:noNamespaceSchemaLocation} hint in the instance document. * * <p>This is the SAX counterpart of {@link SchemaLocationDomTest}. The instance is empty {@code <root/>}; the referenced schema declares a default {@code leak} * attribute carrying {@link AttackTestSupport#LEAKED_MARKER}. A parser that fetches the schema augments the element's attributes with that default (the - * permissive control observes it in {@link DefaultHandler#startElement}), while a hardened parser resolves the schema reference to empty content instead. Either + * permissive control observes it in {@link DefaultHandler#startElement}), while a secure parser resolves the schema reference to empty content instead. Either * the empty schema makes the validating parse fail, or the parse completes but the default is never augmented onto the element; either way the marker is never * observed.</p> * @@ -77,7 +77,7 @@ private static SAXParser newValidatingParser(final SAXParserFactory factory) thr private static void parse(final SAXParser parser, final DefaultHandler handler) throws Exception { // Drive the XMLReader directly rather than SAXParser.parse(InputSource, DefaultHandler): the latter calls reader.setEntityResolver(handler), which would - // clobber the hardened ignore-all resolver that external Xerces relies on to block the schemaLocation fetch. Reuse AttackTestSupport's shared strict + // clobber the secure ignore-all resolver that external Xerces relies on to block the schemaLocation fetch. Reuse AttackTestSupport's shared strict // reporter as the error handler so a blocked fetch surfaces as a thrown exception rather than a silent recovery. final XMLReader reader = parser.getXMLReader(); reader.setContentHandler(handler);
