Google Git
Sign in
apache/commons-xml/HEAD
  1. d075b53 Javadoc by Gary Gregory · 18 hours ago main
  2. 2d638e1 Javadoc by Gary Gregory · 20 hours ago
  3. 117f1e4 Javadoc by Gary Gregory · 21 hours ago
  4. 737180a Merge pull request #21 from ppkarwasz/fix/xinclude by Gary Gregory · 2 days ago
  5. b2cc824 Bump github/codeql-action from 4.36.3 to 4.37.0 by Gary Gregory · 2 days ago
  6. ecda422 Use value for `XmlFactories.harden` by Piotr P. Karwasz · 3 days ago
  7. ee98041 Remove copyright attribution line (thientd) by Piotr P. Karwasz · 3 days ago
  8. 18e600a fix: remove copyright notice line (ppkarwasz) by Piotr P. Karwasz · 4 days ago
  9. 48d3764 Drop redundant ACCESS_EXTERNAL_DTD from the transformer hardening by Piotr P. Karwasz · 5 days ago
  10. 35de397 Assert exact resolved content in XInclude allow-list tests by Piotr P. Karwasz · 5 days ago
  11. 50907a1 Tidy XIncludeTest: shared fixtures and correct XInclude gate by Piotr P. Karwasz · 5 days ago
  12. 684a7c0 Simplify XInclude hardening: rely on the deny-all resolver floor by Piotr P. Karwasz · 5 days ago
  13. 44c927a Fix XInclude hardening: block at resolver level by Ta Duc Thien · 5 days ago
  14. cf99324 Add trailing newlines, use American spelling, and spell out Latin abbreviations (#19) by Piotr P. Karwasz · 4 days ago
  15. de55264 Bump github/codeql-action from 4.36.2 to 4.36.3 by Gary Gregory · 4 days ago
  16. 4d960b9 Merge pull request #18 from ppkarwasz/feature/resolver-floor by Gary Gregory · 4 days ago
  17. b309ee3 Revert incidental spelling and wording changes by Piotr P. Karwasz · 4 days ago
  18. 3449718 Revert incidental spelling and comma changes by Piotr P. Karwasz · 4 days ago
  19. 30fd1f4 Revert EOL by Piotr P. Karwasz · 4 days ago
  20. d246386 build(deps): bump net.sf.saxon:Saxon-HE from 12.9 to 13.0 (#1) by dependabot[bot] · 4 days ago
  21. 863262e Fold DelegatingXMLReader into HardeningXMLReader by Piotr P. Karwasz · 4 days ago
  22. 84f8a36 Add trailing newline to files missing EOL at EOF by Piotr P. Karwasz · 5 days ago
  23. bec0fb2 Merge Delegating wrappers into their Hardening subclasses by Piotr P. Karwasz · 5 days ago
  24. a6b7121 fix: simplify HardeningXMLInputFactory by Piotr P. Karwasz · 5 days ago
  25. 16fe01b fix: sort AttackTestSupport by Piotr P. Karwasz · 5 days ago
  26. ba0272e Guard resolver-property casts in HardeningXMLInputFactory by Piotr P. Karwasz · 5 days ago
  27. 4814fc8 Merge remote-tracking branch 'apache/main' into feature/resolver-floor by Piotr P. Karwasz · 5 days ago
  28. 9b36075 Use US spelling consistently in comments and docs by Piotr P. Karwasz · 5 days ago
  29. 93755f5 Normalize spelling. by Gary Gregory · 5 days ago
  30. b0c6d0a Use final. by Gary Gregory · 5 days ago
  31. 0db292f Set the system id on the XInclude test resolver's InputSource by Piotr P. Karwasz · 5 days ago
  32. 66c18ff Document the resolver floor in the threat model by Piotr P. Karwasz · 5 days ago
  33. 619fba4 Clarify the resolver-floor Javadoc by Piotr P. Karwasz · 5 days ago
  34. 4a17b61 Resolve relative systemId before delegating to a plain EntityResolver by Piotr P. Karwasz · 5 days ago
  35. b3d8bf8 Make the StAX XML resolver a non-overridable floor by Piotr P. Karwasz · 6 days ago
  36. c4566ae Make the transformer URI resolver a non-overridable floor by Piotr P. Karwasz · 6 days ago
  37. bd32bbe Make the schema resource resolver a non-overridable floor by Piotr P. Karwasz · 6 days ago
  38. 04ea092 Add regression test for external schema-location properties by Piotr P. Karwasz · 6 days ago
  39. 4caa700 Extract HardeningDocumentBuilderFactory and reuse the resolver floor by Piotr P. Karwasz · 6 days ago
  40. 8459034 Make the deny-all entity resolver a non-overridable floor (Xerces and Android) by Piotr P. Karwasz · 6 days ago
  41. a8dbc70 Merge pull request #17 from ppkarwasz/feature/transformer-feature-based-hardening by Gary Gregory · 6 days ago
  42. 8acc094 fix: EOF by Piotr P. Karwasz · 6 days ago
  43. a0b6ed8 Base XPathFactory hardening on feature support by Piotr P. Karwasz · 6 days ago
  44. b7c9414 Base TransformerFactory hardening on feature support by Piotr P. Karwasz · 7 days ago
  45. 3738224 Merge pull request #13 from ppkarwasz/feature/schema-feature-based-hardening by Gary Gregory · 7 days ago
  46. 5f9b891 Merge remote-tracking branch 'apache/main' into feature/schema-feature-based-hardening by Piotr P. Karwasz · 7 days ago
  47. 7a43ed0 Merge pull request #12 from ppkarwasz/feature/stax-feature-based-hardening by Gary Gregory · 7 days ago
  48. 9575bca Merge remote-tracking branch 'apache/main' into feature/schema-feature-based-hardening by Piotr P. Karwasz · 7 days ago
  49. eb4b59e Merge remote-tracking branch 'apache/main' into feature/stax-feature-based-hardening by Piotr P. Karwasz · 7 days ago
  50. ad5d6d0 Merge pull request #16 from potiuk/asf-security/agents-md-security-link-2026-07-05 by Gary Gregory · 7 days ago
  51. d2c64e7 Better text by Gary Gregory · 7 days ago
  52. 819ab42 Don't use a link for root security item. by Gary Gregory · 7 days ago
  53. f64805b Update title to include "Threat Model" by Gary Gregory · 7 days ago
  54. 9141651 Add Security section to AGENTS.md linking the security model by Jarek Potiuk · 7 days ago
  55. fa3002c Merge pull request #11 from ppkarwasz/feature/sax-feature-based-hardening by Gary Gregory · 7 days ago
  56. 8842381 Remove vertical whitespace by Gary Gregory · 7 days ago
  57. 69069b8 Move developer section to the bottom of the file by Gary Gregory · 7 days ago
  58. 94eb297 Generate an HTML page for the threat model by Gary Gregory · 7 days ago
  59. e1c91ae Fix XML indentation by Gary Gregory · 7 days ago
  60. 2e84a77 Fill in security document by Gary Gregory · 7 days ago
  61. 3e38212 Normalize spelling by Gary Gregory · 7 days ago
  62. 8a17ad4 Normalize spelling by Gary Gregory · 7 days ago
  63. 241b28e Merge pull request #15 from apache/dependabot/github_actions/actions/cache/restore-6.1.0 by Gary Gregory · 8 days ago
  64. b58e8f0 Merge pull request #14 from apache/dependabot/github_actions/actions/cache-6.1.0 by Gary Gregory · 8 days ago
  65. bd1b00b build(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 by dependabot[bot] · 8 days ago
  66. b1caca8 build(deps): bump actions/cache from 5.0.5 to 6.1.0 by dependabot[bot] · 8 days ago
  67. 253c3a2 Merge branch 'main' of https://github.com/apache/commons-xml into main by Gary Gregory · 8 days ago
  68. a6d6ab6 Add placeholder for the Apache Commons XML Security model amendment. by Gary Gregory · 8 days ago
  69. de31b56 Merge pull request #2 from apache/dependabot/github_actions/actions/dependency-review-action-5.0.0 by Gary Gregory · 8 days ago
  70. 0c4cb12 Fix URLs by Gary Gregory · 8 days ago
  71. d956df5 Fix URL by Gary Gregory · 8 days ago
  72. 1535592 Bump actions/setup-java from 5.3.0 to 5.4.0 by Gary Gregory · 11 days ago
  73. 8e3e198 Bump actions/cache from 6.0.0 to 6.1.0 by Gary Gregory · 13 days ago
  74. 2f44caa Base SchemaFactory hardening on feature support by Piotr P. Karwasz · 14 days ago
  75. 9bc179b Base XMLInputFactory hardening on feature support by Piotr P. Karwasz · 14 days ago
  76. 749b96f Fix checkstyle errors by Piotr P. Karwasz · 14 days ago
  77. 87c7172 Base SAXParserFactory hardening on feature support by Piotr P. Karwasz · 14 days ago
  78. dd2aa62 Normalize spelling. by Gary Gregory · 2 weeks ago
  79. cb65b8a Normalize spelling. by Gary Gregory · 2 weeks ago
  80. 25df71d Refactor magic strings. by Gary Gregory · 2 weeks ago
  81. dec523a Fix Javadoc. by Gary Gregory · 2 weeks ago
  82. bfa4a5a COMMONSXML-1: DocumentBuilderFactory: capability-driven hardening (#5) by Piotr P. Karwasz · 2 weeks ago
  83. 46faf98 build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by dependabot[bot] · 2 weeks ago
  84. 3b15d90 Merge pull request #9 from apache/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.2 by Gary Gregory · 2 weeks ago
  85. 65acfe2 Merge pull request #10 from apache/dependabot/github_actions/actions/checkout-7.0.0 by Gary Gregory · 2 weeks ago
  86. 93c0cc0 build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by dependabot[bot] · 2 weeks ago
  87. 658ce3c build(deps): bump github/codeql-action/upload-sarif by dependabot[bot] · 2 weeks ago
  88. bfabc45 Add javadoc:javadoc to default goal. by Gary Gregory · 2 weeks ago
  89. edaf028 Fix links in site due to missing pages. by Gary Gregory · 2 weeks ago
  90. 87d0615 Add the same basic security page as other Commons components. by Gary Gregory · 2 weeks ago
  91. 83ff0ab Use Apache Commons XML logo on site by Gary Gregory · 2 weeks ago
  92. 97ad66c Add Apache Commons XML logo assets by Gary Gregory · 2 weeks ago
  93. 06425cb Add ggregory as developer in POM. by Gary Gregory · 2 weeks ago
  94. 478073a Bump actions/cache from 5.0.5 to 6.0.0. by Gary Gregory · 2 weeks ago
  95. 37f5ef9 Add Maven PMD plugin. (#8) by Gary Gregory · 3 weeks ago
  96. acbcd7b Bump actions/setup-java from 5.2.0 to 5.3.0 by Gary Gregory · 3 weeks ago
  97. 070b04a Merge pull request #7 from garydgregory/fix/spotbugs_enable by Gary Gregory · 3 weeks ago
  98. 9022170 Add SpotBugs by Gary Gregory · 3 weeks ago
  99. 68a322b Merge pull request #6 from garydgregory/fix/checkstyle_loose_ends by Gary Gregory · 3 weeks ago
  100. f6e0965 Fix issues discovered with Checkstyle by Gary Gregory · 3 weeks ago