This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/commons-secure-xml.git
commit 8516ccdf96ccbc2c988200e06f665ec7f8e63fcc Author: Gary Gregory <[email protected]> AuthorDate: Mon Sep 14 16:56:06 2026 -0700 Javadoc --- .../org/apache/commons/xml/secure/SchemaLocationSaxTest.java | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src/test/java/org/apache/commons/xml/secure/SchemaLocationSaxTest.java b/src/test/java/org/apache/commons/xml/secure/SchemaLocationSaxTest.java index 9ef0c40..73de0b7 100644 --- a/src/test/java/org/apache/commons/xml/secure/SchemaLocationSaxTest.java +++ b/src/test/java/org/apache/commons/xml/secure/SchemaLocationSaxTest.java @@ -38,11 +38,11 @@ * Tests that a secure {@link SAXParserFactory} performing JAXP 1.2 XSD validation does not fetch an external schema named by an * {@code xsi:noNamespaceSchemaLocation} hint in the instance document. * - * <p>This is the SAX counterpart of {@link SchemaLocationDomTest}. The instance is empty {@code <root/>}; the referenced schema declares a default {@code leak} - * attribute carrying {@link AttackTestSupport#LEAKED_MARKER}. A parser that fetches the schema augments the element's attributes with that default (the - * permissive control observes it in {@link DefaultHandler#startElement}), while a secure parser resolves the schema reference to empty content instead. Either - * the empty schema makes the validating parse fail, or the parse completes but the default is never augmented onto the element; either way the marker is never - * observed.</p> + * <p>This is the SAX counterpart of {@link SchemaLocationDomTest}. The instance is an empty {@code <root/>} element; the referenced schema declares a default + * {@code leak} attribute carrying {@link AttackTestSupport#LEAKED_MARKER}. A parser that fetches the schema augments the element's attributes with that default + * (the permissive control observes it in {@link DefaultHandler#startElement}), while a secure parser resolves the schema reference to empty content instead. + * Either the empty schema makes the validating parse fail, or the parse completes but the default attribute is never added to the element; either way, the + * marker is never observed.</p> * * <p>The test runs only where the implementation supports JAXP 1.2 schema-language XSD validation (the stock JDK and external Xerces do; Android does not), so it * skips on parsers without it.</p>
