Apache Commons Secure XML

Clone this repo:
  1. 2f8d466 Bump org.apache.commons:commons-parent from 106 to 107 by Gary Gregory · 4 days ago main
  2. 38f9988 Reference parent AGENTS.md file by Gary Gregory · 4 days ago
  3. e13c524 Bump github/codeql-action from 4.39.0 to 4.39.1 by Gary Gregory · 9 days ago
  4. 9db246e Bump ossf/scorecard-action from 2.4.4 to 2.5.0 by Gary Gregory · 14 days ago
  5. de42e71 Bump github/codeql-action from 4.38.3 to 4.39.0 by Gary Gregory · 2 weeks ago

Apache Commons Secure XML

Java CI Maven Central Javadocs CodeQL OpenSSF Scorecard

Apache Commons Secure XML provides secure-by-default JAXP factory creation, abstracting over implementation-specific XXE securing differences between the stock JDK and external JAXP implementations (Android, Apache Xalan, Apache Xerces, Woodstox, Saxon-HE).

Documentation

More information can be found on the Apache Commons Secure XML homepage. The Javadoc can be browsed. Questions related to the usage of Apache Commons Secure XML should be posted to the user mailing list.

Getting the latest release

You can download source and binaries from our download page.

Alternatively, you can pull it from the central Maven repositories:

<dependency>
  <groupId>org.apache.commons</groupId>
  <artifactId>commons-secure-xml</artifactId>
  <version>1.1.0</version>
</dependency>

Building

Building requires a Java JDK and Apache Maven. The required Java version is found in the pom.xml as the maven.compiler.source property.

From a command shell, run mvn without arguments to invoke the default Maven goal to run all tests and checks.

Contributing

We accept pull requests via GitHub. The developer mailing list is the main channel of communication for contributors. There are some guidelines which will make applying PRs easier for us:

  • No tabs! Please use spaces for indentation.
  • Respect the existing code style for each file.
  • Create minimal diffs: disable on-save actions like reformatting source code or organizing imports. If you feel the source code should be reformatted, create a separate PR for this change.
  • Provide JUnit tests for your changes and make sure your changes don't break any existing tests by running mvn.
  • Before you push a PR, run mvn (without arguments). This runs the default goal which contains all build checks.
  • To see the code coverage report, regardless of coverage failures, run mvn clean site -Dcommons.jacoco.haltOnFailure=false -Pjacoco

If you plan to contribute on a regular basis, please consider filing a contributor license agreement. You can learn more about contributing via GitHub in our contribution guidelines.

License

This code is licensed under the Apache License v2.

See the NOTICE.txt file for required notices and attributions.

Donating

You like Apache Commons Secure XML? Then donate back to the ASF to support development.

Additional Resources

Apache Commons Components