Google Git
Sign in
apache/commons-xml/HEAD
  1. 91f6be1 Bump `commons-parent` to version 104 by Piotr P. Karwasz · 2 days ago main
  2. b1a85ef Merge pull request #41 from ppkarwasz/feature/harden-saxtransformerfactory by Gary Gregory · 4 days ago
  3. 87eff6d Merge pull request #38 from ppkarwasz/docs/supported-runtime-floor by Gary Gregory · 4 days ago
  4. 0aeac4b test: work around the Xalan/libexpat namespace-prefixes bug on Android in XMLFilterTest by Piotr P. Karwasz · 5 days ago
  5. 27d80d8 docs: take Android out of the threat model's guarantee scope by Piotr P. Karwasz · 6 days ago
  6. f45cbaf fix: Javadoc by Piotr P. Karwasz · 6 days ago
  7. 11c3740 fix: minor nitpicks by Piotr P. Karwasz · 6 days ago
  8. 8bc0d82 docs: bring the SAXTransformerFactory extension surface into scope by Piotr P. Karwasz · 6 days ago
  9. dec3ac0 feat: harden the SAXTransformerFactory extension surface by Piotr P. Karwasz · 6 days ago
  10. 94f041d refactor: wrap the Saxon TransformerFactory like every other implementation by Piotr P. Karwasz · 6 days ago
  11. 125a1a3 Bump codeql-action from 4.37.6 to 4.37.7 by Gary Gregory · 6 days ago
  12. 4d61f56 Merge pull request #40 from ppkarwasz/docs/saxtransformerfactory-out-of-scope by Gary Gregory · 6 days ago
  13. c7b7747 Merge pull request #39 from ppkarwasz/docs/fix-stale-harden-reference by Gary Gregory · 6 days ago
  14. 1ce0ab7 docs: declare the SAXTransformerFactory extension surface out of scope by Piotr P. Karwasz · 6 days ago
  15. a9fc7b2 docs: fix stale XmlFactories.harden(XMLReader) reference in threat model by Piotr P. Karwasz · 6 days ago
  16. 4fd6c81 docs: document the supported-runtime floor (OpenJDK 8+, Android 33+) by Piotr P. Karwasz · 6 days ago
  17. 2a67b2f Remove the harden(XMLReader) and harden(Source) methods from the public API (#37) by Piotr P. Karwasz · 6 days ago
  18. 9c84b10 fix: Restore hardened state after reset() (#36) by Piotr P. Karwasz · 6 days ago
  19. be0343d Merge pull request #33 from ppkarwasz/chore/asf-yaml by Gary Gregory · 7 days ago
  20. a62d2fc Merge pull request #29 from apache/feature/threat-model-caller-supplied-parsers by Gary Gregory · 7 days ago
  21. 3337304 Merge pull request #30 from apache/feature/ignore-all-resolver-floors by Piotr P. Karwasz · 7 days ago
  22. cc78d16 Merge branch 'feature/reduce-shade-footprint' into feature/ignore-all-resolver-floors by Piotr P. Karwasz · 7 days ago
  23. 5c7688c fix: number of expected classes by Piotr P. Karwasz · 7 days ago
  24. bc0fa18 Merge branch 'feature/reduce-shade-footprint' into feature/ignore-all-resolver-floors by Piotr P. Karwasz · 7 days ago
  25. c0cbe70 Merge remote-tracking branch 'apache/main' into feature/reduce-shade-footprint by Piotr P. Karwasz · 7 days ago
  26. 6f1cdca Merge pull request #32 from apache/feature/schema-factory-language by Gary Gregory · 7 days ago
  27. 4bcfdae Configure PR buttons by Piotr P. Karwasz · 12 days ago
  28. 5f9a5b3 Bump actions/setup-java from 5.6.0 to 5.7.0 by Gary Gregory · 3 weeks ago
  29. e18cb49 Bump github/codeql-action from 4.37.3 to 4.37.6. by Gary Gregory · 3 weeks ago
  30. ff36786 Remove an unused import by Piotr P. Karwasz · 3 weeks ago
  31. d962e4c Document the ignore-all contract on the site index by Piotr P. Karwasz · 3 weeks ago
  32. 9278083 Reuse the forbidden message for rejected resolutions by Piotr P. Karwasz · 3 weeks ago
  33. 79d5e53 Add a toggle to reject unresolved external references by Piotr P. Karwasz · 3 weeks ago
  34. 56ae530 Drop the Woodstox undeclared-entity floor by Piotr P. Karwasz · 3 weeks ago
  35. ce9c4af Name the external-entity tests after their assertions by Piotr P. Karwasz · 3 weeks ago
  36. 7ca43ba Judge blocked TrAX outcomes with a ThrowingConsumer by Piotr P. Karwasz · 3 weeks ago
  37. 42347e9 Tighten the TrAX leak assertions by Piotr P. Karwasz · 3 weeks ago
  38. 52194eb Resolve ignored URIs to an empty document instead of an empty stream by Piotr P. Karwasz · 3 weeks ago
  39. 673ea4a Reuse the shared StAX capture helper in EntityResolverFloorTest by Piotr P. Karwasz · 3 weeks ago
  40. 49e22d5 Reuse the shared character-capture helpers in tests by Piotr P. Karwasz · 3 weeks ago
  41. 672780d Tidy the HardenedConfiguration comments by Piotr P. Karwasz · 3 weeks ago
  42. 61d3b23 Extend the ignore-all floor to Saxon resource resolution by Piotr P. Karwasz · 3 weeks ago
  43. 848d55e Drop XERCES_LOAD_EXTERNAL_DTD from the hardening recipes by Piotr P. Karwasz · 3 weeks ago
  44. 7ba0341 Make the resolver floors ignore-all instead of deny-all by Piotr P. Karwasz · 6 weeks ago
  45. 0fcd0a1 Disable ShadingFootprintTest in a native image by Piotr P. Karwasz · 3 weeks ago
  46. 6a547ef Add SchemaHardener as the schema entry point by Piotr P. Karwasz · 3 weeks ago
  47. 4c59616 Break the XmlFactories cycle for TrAX, XPath and schema by Piotr P. Karwasz · 7 weeks ago
  48. 5bb6e89 Split the resolver floors into top-level classes by Piotr P. Karwasz · 7 weeks ago
  49. b5267e1 Inline the typed JAXP setters into each hardener by Piotr P. Karwasz · 7 weeks ago
  50. 13e0b74 Centralize hardening messages on HardeningException by Piotr P. Karwasz · 7 weeks ago
  51. 70ab7d8 fix: Javadoc by Piotr P. Karwasz · 3 weeks ago
  52. 26638d7 Add a schemaLanguage parameter to newSchemaFactory by Piotr P. Karwasz · 3 weeks ago
  53. 441c008 Make package private class SaxonProviderConfigurer final by Gary Gregory · 3 weeks ago
  54. 0dd96ba Make package private class HardeningException final by Gary Gregory · 3 weeks ago
  55. ea63d03 Treat caller-supplied parser instances as trusted configuration by Piotr P. Karwasz · 3 weeks ago
  56. e51431f Merge pull request #24 from apache/feature/ci-matrix-platforms by Piotr P. Karwasz · 3 weeks ago
  57. 6d3234a Merge pull request #23 from apache/feature/ci-matrix by Piotr P. Karwasz · 3 weeks ago
  58. 0e21e08 Merge pull request #22 from ppkarwasz/feature/remove-limits-class by Gary Gregory · 3 weeks ago
  59. 0884ea8 Merge branch 'feature/ci-matrix' into feature/ci-matrix-platforms by Piotr P. Karwasz · 3 weeks ago
  60. d7e4262 Merge remote-tracking branch 'apache/main' into feature/remove-limits-class by Piotr P. Karwasz · 3 weeks ago
  61. 2863b29 fix: add `|| false` to `continue-on-error` by Piotr P. Karwasz · 7 weeks ago
  62. bc08dcb fix: make GraalVM experimental by Piotr P. Karwasz · 7 weeks ago
  63. 8bc56f2 Fix POM comment by Piotr P. Karwasz · 7 weeks ago
  64. b6eebc9 Run the test suite as a GraalVM native image by Piotr P. Karwasz · 7 weeks ago
  65. a00db73 Bump ossf/scorecard-action from 2.4.3 to 2.4.4. by Gary Gregory · 4 weeks ago
  66. 4e5895f Bump github/codeql-action from 4.37.1 to 4.37.3 by Gary Gregory · 4 weeks ago
  67. e0d665d Merge branch 'main' of https://github.com/apache/commons-xml into main by Gary Gregory · 4 weeks ago
  68. d3c3bb6 Bump actions/checkout from 7.0.0 to 7.0.1 by Gary Gregory · 4 weeks ago
  69. 47491aa Merge pull request #26 from apache/dependabot/github_actions/actions/checkout-7.0.1 by Gary Gregory · 4 weeks ago
  70. dc79fdc build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by dependabot[bot] · 4 weeks ago
  71. a4630c7 build(deps): bump reactivecircus/android-emulator-runner (#25) by dependabot[bot] · 4 weeks ago
  72. 91897e3 Bump org.apache.commons:commons-parent from 102 to 103. by Gary Gregory · 5 weeks ago
  73. 24f22a1 Bump github/codeql-action from 4.37.0 to 4.37.1 by Gary Gregory · 5 weeks ago
  74. 544badd Bump actions/setup-java from 5.5.0 to 5.6.0 by Gary Gregory · 5 weeks ago
  75. 2647cf2 Bump actions/setup-java from 5.4.0 to 5.5.0 by Gary Gregory · 6 weeks ago
  76. d075b53 Javadoc by Gary Gregory · 6 weeks ago
  77. 2d638e1 Javadoc by Gary Gregory · 6 weeks ago
  78. 117f1e4 Javadoc by Gary Gregory · 6 weeks ago
  79. b184cd6 Merge branch 'feature/ci-matrix' into feature/ci-matrix-platforms by Piotr P. Karwasz · 6 weeks ago
  80. 1073f82 Merge remote-tracking branch 'apache/main' into feature/ci-matrix-platforms by Piotr P. Karwasz · 6 weeks ago
  81. 7202037 Merge remote-tracking branch 'apache/main' into feature/ci-matrix by Piotr P. Karwasz · 6 weeks ago
  82. 02005a2 Merge remote-tracking branch 'apache/main' into feature/remove-limits-class by Piotr P. Karwasz · 6 weeks ago
  83. 737180a Merge pull request #21 from ppkarwasz/fix/xinclude by Gary Gregory · 6 weeks ago
  84. b2cc824 Bump github/codeql-action from 4.36.3 to 4.37.0 by Gary Gregory · 6 weeks ago
  85. caa0d3b Merge branch 'feature/ci-matrix' into feature/ci-matrix-platforms by Piotr P. Karwasz · 7 weeks ago
  86. 1169468 fix: add `|| false` to `continue-on-error` by Piotr P. Karwasz · 7 weeks ago
  87. ad962ce Merge branch 'feature/ci-matrix' into feature/ci-matrix-platforms by Piotr P. Karwasz · 7 weeks ago
  88. e9f99b9 fix: make GraalVM experimental by Piotr P. Karwasz · 7 weeks ago
  89. fb2bfef Restructure the build matrix around the axes that matter by Piotr P. Karwasz · 7 weeks ago
  90. d2434be Fix POM comment by Piotr P. Karwasz · 7 weeks ago
  91. b9964b3 Run the test suite as a GraalVM native image by Piotr P. Karwasz · 7 weeks ago
  92. 55b9b13 Fix `content()` Javadoc by Piotr P. Karwasz · 7 weeks ago
  93. 72df8f7 Split the XSLT payload across two literal result elements by Piotr P. Karwasz · 7 weeks ago
  94. 3abfea5 Fold the Woodstox entity-count lift into liftEntityLimits by Piotr P. Karwasz · 7 weeks ago
  95. 0676eb4 fix: rename assumeSAXLimitConfigurable by Piotr P. Karwasz · 7 weeks ago
  96. 67353b1 fix: orphan mention of JDK system properties by Piotr P. Karwasz · 7 weeks ago
  97. 9df3143 Lift all three JDK entity limits in the positive controls by Piotr P. Karwasz · 7 weeks ago
  98. ecda422 Use value for `XmlFactories.harden` by Piotr P. Karwasz · 7 weeks ago
  99. bf4e084 Refactor BillionLaughsTest payloads by Piotr P. Karwasz · 7 weeks ago
  100. 0e2901a Remove the Limits class by Piotr P. Karwasz · 7 weeks ago