snoopdave opened a new pull request, #236:
URL: https://github.com/apache/roller/pull/236

   Roller sends weblog update pings through the Apache XML-RPC client library. 
This replaces that with a direct, hardened request/response exchange, so the 
pinger no longer depends on the client library.
   
   - Builds the `weblogUpdates.ping` request and reads the response itself, 
parsing with the project's `SecureXmlParsers` and reading only the `flerror` 
and `message` fields the protocol defines; adds connection and read timeouts 
and a 1 MiB cap on the response.
   - Removes the now-unused `xmlrpc-client` dependency; 
`xmlrpc-common`/`xmlrpc-server` stay for the inbound XML-RPC servlet.
   - Adds `WeblogUpdatePingerTest` (7 tests) covering request building and 
escaping, normal/error/fault response parsing, and DOCTYPE refusal; updates 
CHANGES.md.
   
   Targets `roller-6.1.x`. Verified locally on JDK 11 (`mvn -o -pl app test 
-Dtest=WeblogUpdatePingerTest`): the new tests pass and the module 
test-compiles clean. The full suite runs in CI.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to