Google Git
Sign in
apache/axis-axis2-java-core/HEAD
  1. e170a13 Stop bundling the JMS transport in axis2.war by Robert Lazarski · 14 hours ago master
  2. 5e93c08 Drop the unused testkit dependency from transport-h2 by Robert Lazarski · 14 hours ago
  3. b5a2474 Deprecate the mail transport for removal in 2.1.0 by Robert Lazarski · 14 hours ago
  4. 0795c50 Stop a remote server retargeting WSDL2Java's own WSDL fetch by Robert Lazarski · 14 hours ago
  5. 3cc039d Confine packaged-metadata lookup and fix a fail-open schema guard by Robert Lazarski · 15 hours ago
  6. 3ff914a Make two threat-model claims true, and scope what they do not cover by Robert Lazarski · 26 hours ago
  7. 00274ee Pin the Swagger UI scripts, and stop naming exception classes in faults by Robert Lazarski · 26 hours ago
  8. 6bdd6a0 Screen every WSDL-loading path, not just the client-side one by Robert Lazarski · 29 hours ago
  9. 25db09b update same dep on httpcomponents by Robert Lazarski · 30 hours ago
  10. 94c935d Bound the MTOM, SwA and SOAP bodies too by Robert Lazarski · 31 hours ago
  11. 583e78e Bound multiref resolution against cycles and expansion by Robert Lazarski · 31 hours ago
  12. 84811c7 Say what context deserialization actually enforces, and enforce that by Robert Lazarski · 32 hours ago
  13. 8be5bb5 Filter the service listing in the model, not only in the view by Robert Lazarski · 33 hours ago
  14. c06f6ef Keep generated output inside the output directory by Robert Lazarski · 3 days ago
  15. fd63663 Escape schema values before they reach generated source by Robert Lazarski · 3 days ago
  16. 42fdc81 Do not trust the schema the schema compiler is compiling by Robert Lazarski · 3 days ago
  17. 515c4bc Answer a hidden service as though it were not deployed by Robert Lazarski · 3 days ago
  18. 8a81216 Honour exposeServiceMetadata on the listing, WS-MEX and ping by Robert Lazarski · 3 days ago
  19. 1c092af AXIS2-6062: screen JMS addresses by JNDI scheme, not by substring by Robert Lazarski · 3 days ago
  20. dc51d36 Refuse a caller-supplied JNDI environment on a JMS reply by Robert Lazarski · 3 days ago
  21. fe5e5ee Do not follow redirects on a decoupled response over HTTP/2 by Robert Lazarski · 3 days ago
  22. b5071b4 Write up the 2.0.2 hardening for upgraders by Robert Lazarski · 3 days ago
  23. 056750c Require opt-in to select a service from the message body by Robert Lazarski · 3 days ago
  24. 5e8ee0f Stop publishing default admin console credentials by Robert Lazarski · 3 days ago
  25. dfacb5c Pin the ant builds to a Java 17 release by Robert Lazarski · 3 days ago
  26. 843626d Pin the scheme predicate the AAR and WAR SSRF guards rely on by Robert Lazarski · 3 days ago
  27. 522466b Declare isAbsolute locally in the AAR and WAR schema resolvers by Robert Lazarski · 3 days ago
  28. 9c2e536 Merge pull request #1291 from apache/dependabot/maven/development-dependencies-097c1ff2cb by Christian Ortlepp · 6 days ago
  29. 5ce39db Merge pull request #1290 from apache/dependabot/maven/production-dependencies-902b8a662f by Christian Ortlepp · 6 days ago
  30. c53e980 Merge pull request #1289 from apache/dependabot/github_actions/production-actions-62c522be73 by Christian Ortlepp · 6 days ago
  31. ea0b8e6 Merge pull request #1287 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/org.apache.httpcomponents.client5-httpclient5-5.6.3 by Christian Ortlepp · 6 days ago
  32. 1e866b9 build(deps-dev): bump the development-dependencies group with 2 updates by dependabot[bot] · 10 days ago
  33. 7f28ee8 build(deps): bump the production-dependencies group with 13 updates by dependabot[bot] · 10 days ago
  34. 8201bea build(deps): bump actions/setup-java in the production-actions group by dependabot[bot] · 10 days ago
  35. d6034ac Merge pull request #1288 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/org.apache.httpcomponents.core5-httpcore5-h2-5.4.3 by Christian Ortlepp · 12 days ago
  36. e33c941 build(deps): bump org.apache.httpcomponents.core5:httpcore5-h2 by dependabot[bot] · 12 days ago
  37. eec90a9 build(deps): bump org.apache.httpcomponents.client5:httpclient5 by dependabot[bot] · 12 days ago
  38. ca25fcf Merge pull request #1286 from apache/dependabot/maven/production-dependencies-71a8839716 by Christian Ortlepp · 12 days ago
  39. c92f701 build(deps): bump the production-dependencies group with 3 updates by dependabot[bot] · 2 weeks ago
  40. a1ff8fb Merge pull request #1275 from apache/dependabot/maven/activemq.version-6.3.1 by Christian Ortlepp · 3 weeks ago
  41. 3ae986e Merge pull request #1279 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/org.apache.httpcomponents.core5-httpcore5-5.4.3 by Christian Ortlepp · 3 weeks ago
  42. 31c8d45 Merge pull request #1280 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo-wildfly/org.apache.httpcomponents.client5-httpclient5-5.6.3 by Christian Ortlepp · 3 weeks ago
  43. ffe7390 Merge pull request #1271 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo/org.apache.httpcomponents.core5-httpcore5-5.4.3 by Christian Ortlepp · 3 weeks ago
  44. 3693e44 Merge pull request #1281 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/org.apache.httpcomponents.core5-httpcore5-h2-5.4.3 by Christian Ortlepp · 3 weeks ago
  45. adc6a84 Merge pull request #1283 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo-wildfly/org.apache.httpcomponents.core5-httpcore5-5.4.3 by Christian Ortlepp · 3 weeks ago
  46. 61781e9 Merge pull request #1285 from apache/dependabot/maven/development-dependencies-640c53ed23 by Christian Ortlepp · 3 weeks ago
  47. d1b2cbe Merge pull request #1284 from apache/dependabot/maven/production-dependencies-048af63051 by Christian Ortlepp · 3 weeks ago
  48. 2e56ab1 build(deps-dev): bump the development-dependencies group with 2 updates by dependabot[bot] · 3 weeks ago
  49. 91b21af build(deps): bump the production-dependencies group with 3 updates by dependabot[bot] · 3 weeks ago
  50. 6b3d297 build(deps): bump org.apache.httpcomponents.core5:httpcore5 by dependabot[bot] · 3 weeks ago
  51. 7be0b03 Merge pull request #1277 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo/org.apache.httpcomponents.client5-httpclient5-5.6.3 by Christian Ortlepp · 3 weeks ago
  52. 4409aca Merge pull request #1278 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/org.apache.httpcomponents.client5-httpclient5-5.6.3 by Christian Ortlepp · 3 weeks ago
  53. cb5b80c Merge pull request #1276 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo/org.apache.httpcomponents.core5-httpcore5-h2-5.4.3 by Christian Ortlepp · 3 weeks ago
  54. 209f375 Merge pull request #1272 from apache/dependabot/maven/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/org.apache.httpcomponents.core5-httpcore5-5.4.3 by Christian Ortlepp · 3 weeks ago
  55. 180d261 Merge pull request #1282 from apache/cortlepp/group-dependabot-prs by Christian Ortlepp · 3 weeks ago
  56. f3a4384 dependabot: ignore samples, add dev-dependency group by Christian Ortlepp · 3 weeks ago cortlepp/group-dependabot-prs
  57. 7e9c93d build(deps): bump org.apache.httpcomponents.core5:httpcore5-h2 by dependabot[bot] · 3 weeks ago
  58. daad1fd build(deps): bump org.apache.httpcomponents.client5:httpclient5 by dependabot[bot] · 3 weeks ago
  59. aa3b5c8 build(deps): bump org.apache.httpcomponents.core5:httpcore5 by dependabot[bot] · 3 weeks ago
  60. 7a5906d Merge pull request #1273 from apache/dependabot/maven/production-dependencies-8c5f20ad2e by Christian Ortlepp · 3 weeks ago
  61. ead8483 Bump the Swagger UI console to 5.32.13 by Robert Lazarski · 3 weeks ago
  62. d7b7ce6 build(deps): bump org.apache.httpcomponents.client5:httpclient5 by dependabot[bot] · 3 weeks ago
  63. 5cacfc0 build(deps): bump org.apache.httpcomponents.client5:httpclient5 by dependabot[bot] · 3 weeks ago
  64. 294382f build(deps): bump org.apache.httpcomponents.core5:httpcore5-h2 by dependabot[bot] · 3 weeks ago
  65. 8c340a2 build(deps-dev): bump activemq.version from 6.3.0 to 6.3.1 by dependabot[bot] · 3 weeks ago
  66. 0fb12ad build(deps): bump the production-dependencies group with 2 updates by dependabot[bot] · 3 weeks ago
  67. d13c265 build(deps): bump org.apache.httpcomponents.core5:httpcore5 by dependabot[bot] · 3 weeks ago
  68. b53420c build(deps): bump org.apache.httpcomponents.core5:httpcore5 by dependabot[bot] · 3 weeks ago
  69. 2f4e2d3 Cover IPv6 response endpoints and record how the body ceilings measure by Robert Lazarski · 4 weeks ago
  70. dccf153 Merge pull request #1269 from apache/dependabot/maven/production-dependencies-957f099693 by Christian Ortlepp · 4 weeks ago
  71. 8aa4db5 build(deps): bump the production-dependencies group with 4 updates by dependabot[bot] · 4 weeks ago
  72. 0e02005 Merge pull request #1268 from apache/cortlepp/group-dependabot-prs by Christian Ortlepp · 4 weeks ago
  73. bc1e4df dependabot: enable groups, change frequency to weekly by Christian Ortlepp · 4 weeks ago
  74. 107b8d7 Merge pull request #1267 from apache/dependabot/maven/swagger.version-2.2.53 by Christian Ortlepp · 4 weeks ago
  75. c292ba8 build(deps): bump swagger.version from 2.2.52 to 2.2.53 by dependabot[bot] · 4 weeks ago
  76. 91b9bb8 Merge pull request #1264 from apache/dependabot/github_actions/actions/setup-java-5.7.0 by Christian Ortlepp · 4 weeks ago
  77. 83745f3 Merge pull request #1265 from apache/dependabot/maven/groovy.version-5.0.8 by Christian Ortlepp · 4 weeks ago
  78. f5431ea Merge pull request #1266 from apache/dependabot/maven/xmlunit.version-2.13.0 by Christian Ortlepp · 4 weeks ago
  79. 91bfe95 Opt the JAX-WS integration repositories into decoupled responses by Robert Lazarski · 4 weeks ago
  80. 1ba2b12 Opt the transport and sample repositories into decoupled responses by Robert Lazarski · 4 weeks ago
  81. c201358 Document the 2.0.2 hardening in the threat model by Robert Lazarski · 4 weeks ago
  82. 5ec4d15 Drop third-party references from test documentation by Robert Lazarski · 4 weeks ago
  83. 75191f7 Do not follow redirects when sending a decoupled response by Robert Lazarski · 4 weeks ago
  84. 1d325f4 Permit only https as a reply scheme unless told otherwise by Robert Lazarski · 4 weeks ago
  85. 52c7ba3 Also gate the response endpoint where the transport is acquired by Robert Lazarski · 4 weeks ago
  86. 1b6856b Refuse decoupled WS-Addressing responses by default by Robert Lazarski · 4 weeks ago
  87. a483b5c Publish a relative OpenAPI server URL instead of following the Host by Robert Lazarski · 5 weeks ago
  88. cbcccb3 Bound and shut down the response-endpoint resolver pool by Robert Lazarski · 5 weeks ago
  89. 0e256fd Bound the response-endpoint name lookup by Robert Lazarski · 5 weeks ago
  90. bb87bde Merge remote-tracking branch 'origin/master' by Robert Lazarski · 5 weeks ago
  91. 8c783ed Harden five anonymous-reachable surfaces from a private security report by Robert Lazarski · 5 weeks ago
  92. cfbaf6a Cover the attack path an inbound wsa:ReplyTo actually takes by Robert Lazarski · 5 weeks ago
  93. 9ad5b47 Only refuse never-legitimate reply destinations by default by Robert Lazarski · 5 weeks ago
  94. f98c5d4 Mirror the new tuning parameters into the webapp axis2.xml by Robert Lazarski · 5 weeks ago
  95. 1b5b2fc Do not restrict WS-Addressing reply endpoints to HTTP by Robert Lazarski · 5 weeks ago
  96. 2b98e5a Delete multipart temporary files instead of accumulating them by Robert Lazarski · 5 weeks ago
  97. 1671a68 Harden five anonymous-reachable surfaces reported privately on 2026-07-30 by Robert Lazarski · 5 weeks ago
  98. 3c8227f build(deps): bump xmlunit.version from 2.12.0 to 2.13.0 by dependabot[bot] · 5 weeks ago
  99. 84a5bad build(deps): bump groovy.version from 5.0.7 to 5.0.8 by dependabot[bot] · 5 weeks ago
  100. a9fef79 build(deps): bump actions/setup-java from 5.6.0 to 5.7.0 by dependabot[bot] · 5 weeks ago