Google Git
Sign in
apache/commons-xml/HEAD
  1. 441c008 Make package private class SaxonProviderConfigurer final by Gary Gregory · 2 days ago main
  2. 0dd96ba Make package private class HardeningException final by Gary Gregory · 2 days ago
  3. e51431f Merge pull request #24 from apache/feature/ci-matrix-platforms by Piotr P. Karwasz · 2 days ago
  4. 6d3234a Merge pull request #23 from apache/feature/ci-matrix by Piotr P. Karwasz · 2 days ago
  5. 0e21e08 Merge pull request #22 from ppkarwasz/feature/remove-limits-class by Gary Gregory · 2 days ago
  6. 0884ea8 Merge branch 'feature/ci-matrix' into feature/ci-matrix-platforms by Piotr P. Karwasz · 2 days ago feature/ci-matrix-platforms
  7. d7e4262 Merge remote-tracking branch 'apache/main' into feature/remove-limits-class by Piotr P. Karwasz · 2 days ago
  8. 2863b29 fix: add `|| false` to `continue-on-error` by Piotr P. Karwasz · 3 weeks ago feature/ci-matrix
  9. bc08dcb fix: make GraalVM experimental by Piotr P. Karwasz · 3 weeks ago
  10. 8bc56f2 Fix POM comment by Piotr P. Karwasz · 3 weeks ago
  11. b6eebc9 Run the test suite as a GraalVM native image by Piotr P. Karwasz · 3 weeks ago
  12. a00db73 Bump ossf/scorecard-action from 2.4.3 to 2.4.4. by Gary Gregory · 5 days ago
  13. 4e5895f Bump github/codeql-action from 4.37.1 to 4.37.3 by Gary Gregory · 6 days ago
  14. e0d665d Merge branch 'main' of https://github.com/apache/commons-xml into main by Gary Gregory · 9 days ago
  15. d3c3bb6 Bump actions/checkout from 7.0.0 to 7.0.1 by Gary Gregory · 9 days ago
  16. 47491aa Merge pull request #26 from apache/dependabot/github_actions/actions/checkout-7.0.1 by Gary Gregory · 9 days ago
  17. dc79fdc build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by dependabot[bot] · 9 days ago
  18. a4630c7 build(deps): bump reactivecircus/android-emulator-runner (#25) by dependabot[bot] · 9 days ago
  19. 91897e3 Bump org.apache.commons:commons-parent from 102 to 103. by Gary Gregory · 12 days ago
  20. 24f22a1 Bump github/codeql-action from 4.37.0 to 4.37.1 by Gary Gregory · 13 days ago
  21. 544badd Bump actions/setup-java from 5.5.0 to 5.6.0 by Gary Gregory · 13 days ago
  22. 2647cf2 Bump actions/setup-java from 5.4.0 to 5.5.0 by Gary Gregory · 3 weeks ago
  23. d075b53 Javadoc by Gary Gregory · 3 weeks ago
  24. 2d638e1 Javadoc by Gary Gregory · 3 weeks ago
  25. 117f1e4 Javadoc by Gary Gregory · 3 weeks ago
  26. b184cd6 Merge branch 'feature/ci-matrix' into feature/ci-matrix-platforms by Piotr P. Karwasz · 3 weeks ago
  27. 1073f82 Merge remote-tracking branch 'apache/main' into feature/ci-matrix-platforms by Piotr P. Karwasz · 3 weeks ago
  28. 7202037 Merge remote-tracking branch 'apache/main' into feature/ci-matrix by Piotr P. Karwasz · 3 weeks ago
  29. 02005a2 Merge remote-tracking branch 'apache/main' into feature/remove-limits-class by Piotr P. Karwasz · 3 weeks ago
  30. 737180a Merge pull request #21 from ppkarwasz/fix/xinclude by Gary Gregory · 3 weeks ago
  31. b2cc824 Bump github/codeql-action from 4.36.3 to 4.37.0 by Gary Gregory · 3 weeks ago
  32. caa0d3b Merge branch 'feature/ci-matrix' into feature/ci-matrix-platforms by Piotr P. Karwasz · 3 weeks ago
  33. 1169468 fix: add `|| false` to `continue-on-error` by Piotr P. Karwasz · 3 weeks ago
  34. ad962ce Merge branch 'feature/ci-matrix' into feature/ci-matrix-platforms by Piotr P. Karwasz · 3 weeks ago
  35. e9f99b9 fix: make GraalVM experimental by Piotr P. Karwasz · 3 weeks ago
  36. fb2bfef Restructure the build matrix around the axes that matter by Piotr P. Karwasz · 3 weeks ago
  37. d2434be Fix POM comment by Piotr P. Karwasz · 3 weeks ago
  38. b9964b3 Run the test suite as a GraalVM native image by Piotr P. Karwasz · 3 weeks ago
  39. 55b9b13 Fix `content()` Javadoc by Piotr P. Karwasz · 4 weeks ago
  40. 72df8f7 Split the XSLT payload across two literal result elements by Piotr P. Karwasz · 4 weeks ago
  41. 3abfea5 Fold the Woodstox entity-count lift into liftEntityLimits by Piotr P. Karwasz · 4 weeks ago
  42. 0676eb4 fix: rename assumeSAXLimitConfigurable by Piotr P. Karwasz · 4 weeks ago
  43. 67353b1 fix: orphan mention of JDK system properties by Piotr P. Karwasz · 4 weeks ago
  44. 9df3143 Lift all three JDK entity limits in the positive controls by Piotr P. Karwasz · 4 weeks ago
  45. ecda422 Use value for `XmlFactories.harden` by Piotr P. Karwasz · 4 weeks ago
  46. bf4e084 Refactor BillionLaughsTest payloads by Piotr P. Karwasz · 4 weeks ago
  47. 0e2901a Remove the Limits class by Piotr P. Karwasz · 4 weeks ago
  48. ee98041 Remove copyright attribution line (thientd) by Piotr P. Karwasz · 4 weeks ago
  49. 18e600a fix: remove copyright notice line (ppkarwasz) by Piotr P. Karwasz · 4 weeks ago
  50. 48d3764 Drop redundant ACCESS_EXTERNAL_DTD from the transformer hardening by Piotr P. Karwasz · 4 weeks ago
  51. 35de397 Assert exact resolved content in XInclude allow-list tests by Piotr P. Karwasz · 4 weeks ago
  52. 50907a1 Tidy XIncludeTest: shared fixtures and correct XInclude gate by Piotr P. Karwasz · 4 weeks ago
  53. 684a7c0 Simplify XInclude hardening: rely on the deny-all resolver floor by Piotr P. Karwasz · 4 weeks ago
  54. 44c927a Fix XInclude hardening: block at resolver level by Ta Duc Thien · 4 weeks ago
  55. cf99324 Add trailing newlines, use American spelling, and spell out Latin abbreviations (#19) by Piotr P. Karwasz · 4 weeks ago
  56. de55264 Bump github/codeql-action from 4.36.2 to 4.36.3 by Gary Gregory · 4 weeks ago
  57. 4d960b9 Merge pull request #18 from ppkarwasz/feature/resolver-floor by Gary Gregory · 4 weeks ago
  58. b309ee3 Revert incidental spelling and wording changes by Piotr P. Karwasz · 4 weeks ago
  59. 3449718 Revert incidental spelling and comma changes by Piotr P. Karwasz · 4 weeks ago
  60. 30fd1f4 Revert EOL by Piotr P. Karwasz · 4 weeks ago
  61. d246386 build(deps): bump net.sf.saxon:Saxon-HE from 12.9 to 13.0 (#1) by dependabot[bot] · 4 weeks ago
  62. 863262e Fold DelegatingXMLReader into HardeningXMLReader by Piotr P. Karwasz · 4 weeks ago
  63. 84f8a36 Add trailing newline to files missing EOL at EOF by Piotr P. Karwasz · 4 weeks ago
  64. bec0fb2 Merge Delegating wrappers into their Hardening subclasses by Piotr P. Karwasz · 4 weeks ago
  65. a6b7121 fix: simplify HardeningXMLInputFactory by Piotr P. Karwasz · 4 weeks ago
  66. 16fe01b fix: sort AttackTestSupport by Piotr P. Karwasz · 4 weeks ago
  67. ba0272e Guard resolver-property casts in HardeningXMLInputFactory by Piotr P. Karwasz · 4 weeks ago
  68. 4814fc8 Merge remote-tracking branch 'apache/main' into feature/resolver-floor by Piotr P. Karwasz · 4 weeks ago
  69. 9b36075 Use US spelling consistently in comments and docs by Piotr P. Karwasz · 4 weeks ago
  70. 93755f5 Normalize spelling. by Gary Gregory · 4 weeks ago
  71. b0c6d0a Use final. by Gary Gregory · 4 weeks ago
  72. 0db292f Set the system id on the XInclude test resolver's InputSource by Piotr P. Karwasz · 4 weeks ago
  73. 66c18ff Document the resolver floor in the threat model by Piotr P. Karwasz · 4 weeks ago
  74. 619fba4 Clarify the resolver-floor Javadoc by Piotr P. Karwasz · 4 weeks ago
  75. 4a17b61 Resolve relative systemId before delegating to a plain EntityResolver by Piotr P. Karwasz · 4 weeks ago
  76. b3d8bf8 Make the StAX XML resolver a non-overridable floor by Piotr P. Karwasz · 4 weeks ago
  77. c4566ae Make the transformer URI resolver a non-overridable floor by Piotr P. Karwasz · 4 weeks ago
  78. bd32bbe Make the schema resource resolver a non-overridable floor by Piotr P. Karwasz · 4 weeks ago
  79. 04ea092 Add regression test for external schema-location properties by Piotr P. Karwasz · 4 weeks ago
  80. 4caa700 Extract HardeningDocumentBuilderFactory and reuse the resolver floor by Piotr P. Karwasz · 4 weeks ago
  81. 8459034 Make the deny-all entity resolver a non-overridable floor (Xerces and Android) by Piotr P. Karwasz · 4 weeks ago
  82. a8dbc70 Merge pull request #17 from ppkarwasz/feature/transformer-feature-based-hardening by Gary Gregory · 4 weeks ago
  83. 8acc094 fix: EOF by Piotr P. Karwasz · 4 weeks ago
  84. a0b6ed8 Base XPathFactory hardening on feature support by Piotr P. Karwasz · 4 weeks ago
  85. b7c9414 Base TransformerFactory hardening on feature support by Piotr P. Karwasz · 4 weeks ago
  86. 3738224 Merge pull request #13 from ppkarwasz/feature/schema-feature-based-hardening by Gary Gregory · 4 weeks ago
  87. 5f9b891 Merge remote-tracking branch 'apache/main' into feature/schema-feature-based-hardening by Piotr P. Karwasz · 4 weeks ago
  88. 7a43ed0 Merge pull request #12 from ppkarwasz/feature/stax-feature-based-hardening by Gary Gregory · 4 weeks ago
  89. 9575bca Merge remote-tracking branch 'apache/main' into feature/schema-feature-based-hardening by Piotr P. Karwasz · 4 weeks ago
  90. eb4b59e Merge remote-tracking branch 'apache/main' into feature/stax-feature-based-hardening by Piotr P. Karwasz · 4 weeks ago
  91. ad5d6d0 Merge pull request #16 from potiuk/asf-security/agents-md-security-link-2026-07-05 by Gary Gregory · 4 weeks ago
  92. d2c64e7 Better text by Gary Gregory · 4 weeks ago
  93. 819ab42 Don't use a link for root security item. by Gary Gregory · 4 weeks ago
  94. f64805b Update title to include "Threat Model" by Gary Gregory · 4 weeks ago
  95. 9141651 Add Security section to AGENTS.md linking the security model by Jarek Potiuk · 4 weeks ago
  96. fa3002c Merge pull request #11 from ppkarwasz/feature/sax-feature-based-hardening by Gary Gregory · 4 weeks ago
  97. 8842381 Remove vertical whitespace by Gary Gregory · 4 weeks ago
  98. 69069b8 Move developer section to the bottom of the file by Gary Gregory · 4 weeks ago
  99. 94eb297 Generate an HTML page for the threat model by Gary Gregory · 4 weeks ago
  100. e1c91ae Fix XML indentation by Gary Gregory · 4 weeks ago