This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-secure-xml.git
commit f59d1bedd64d01b184e47fc2d369ab8834fe638d Author: Gary Gregory <[email protected]> AuthorDate: Mon Sep 14 16:48:15 2026 -0700 Javadoc --- .../java/org/apache/commons/xml/secure/SchemaLocationDomTest.java | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/test/java/org/apache/commons/xml/secure/SchemaLocationDomTest.java b/src/test/java/org/apache/commons/xml/secure/SchemaLocationDomTest.java index c45f49e..624a69c 100644 --- a/src/test/java/org/apache/commons/xml/secure/SchemaLocationDomTest.java +++ b/src/test/java/org/apache/commons/xml/secure/SchemaLocationDomTest.java @@ -39,10 +39,10 @@ * Tests that a secure {@link DocumentBuilderFactory} performing JAXP 1.2 XSD validation does not fetch an external schema named by an * {@code xsi:noNamespaceSchemaLocation} hint in the instance document. * - * <p>The instance is empty {@code <root/>}; the referenced schema declares a default {@code leak} attribute carrying {@link AttackTestSupport#LEAKED_MARKER}. A - * parser that fetches the schema inlines that default into the DOM (the permissive control), while a secure parser resolves the schema reference to empty - * content instead. Either the empty schema makes the validating parse fail, or the parse completes but the default is never inlined; either way the marker never - * reaches the DOM.</p> + * <p>The instance is an empty {@code <root/>} element; the referenced schema declares a default {@code leak} attribute carrying + * {@link AttackTestSupport#LEAKED_MARKER}. A parser that fetches the schema inlines that default into the DOM (the permissive control), while a secure parser + * resolves the schema reference to empty content instead. Either the empty schema makes the validating parse fail, or the parse completes but the default is + * never inlined; either way, the marker never reaches the DOM.</p> * * <p>The test runs only where the implementation supports JAXP 1.2 schema-language XSD validation (the stock JDK and external Xerces do; Android does not), so * it skips on parsers without it.</p>
