ppkarwasz opened a new pull request, #81: URL: https://github.com/apache/commons-secure-xml/pull/81
A secured factory inverts what a resolver means: returning `null` leaves the reference unresolved and the floor answers it with empty content, rather than handing the reference back to the parser to fetch. A resolver is therefore the only way to opt a resource back in, which the overview did not say anywhere. Adds a **Resolvers** section to `overview.html`: - what a `null` return now means, and that a non-null result is honored even where the JAXP 1.5 external-access properties would deny the fetch; - which identifier to match against an allow-list, absolute for `EntityResolver` and relative plus a base URI for the others; - one worked example per resolver API (`EntityResolver`, `LSResourceResolver`, `URIResolver`, `XMLResolver`), each naming the channels that resolver covers; - links to the Java 25 API documentation at the first mention of each JAXP, SAX and DOM type. Documentation only, no main code changes. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
