This is an automated email from the ASF dual-hosted git repository. robertlazarski pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/axis-axis2-java-core.git
commit c72f00840f2fd30ea33f30ce3cd15b2a0da7edfd Author: Robert Lazarski <[email protected]> AuthorDate: Mon Jun 1 10:10:05 2026 -1000 Add HTTP/2 transport module to scan guidance modules/transport-h2/ contains the HTTP/2 sender implementation via HttpClient5 with ALPN negotiation, flow control, streaming, and error handling. Add key files to HTTP transport scan area and include transport-h2 in project structure. Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]> --- AGENTS.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/AGENTS.md b/AGENTS.md index 13671d706b..72472ae3a6 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -81,10 +81,17 @@ The HTTP transport is the network entry point for all protocols (JSON-RPC, REST, SOAP). Scan for header injection, request smuggling, and URI parsing issues. -Key files: +Key files (HTTP/1.1 — primary inbound path): - `modules/transport/http/src/main/java/org/apache/axis2/transport/http/AxisServlet.java` - `modules/transport/http/src/main/java/org/apache/axis2/transport/http/HTTPWorker.java` +Key files (HTTP/2 — outbound sender via HttpClient5): +- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/H2TransportSender.java` +- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/H2FlowControlManager.java` +- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/H2StreamingRequestImpl.java` +- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/H2ErrorHandler.java` +- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/ALPNProtocolSelector.java` + ### 5. XML Parsing (XXE/SSRF via third-party libraries, secondary) wsdl4j and xmlschema-core create their own XML parser factories without @@ -132,6 +139,7 @@ modules/ kernel/ Core engine: message pipeline, handlers, deployment, XML parsing, dispatchers, context transport/ Pluggable transports: HTTP, local, JMS, TCP, UDP, mail + transport-h2/ HTTP/2 transport sender (HttpClient5, ALPN, flow control, streaming) openapi/ OpenAPI schema generation, Swagger UI, MCP catalog mcp-bridge/ MCP stdio bridge for AI agent integration webapp/ Admin console WAR
