[COMMONSXML-9] Make the resolver floor non-removable across JAXP implementations - #18

Merged

garydgregory merged 21 commits into

apache:mainfrom

ppkarwasz:feature/resolver-floor

Jul 8, 2026

Commits on Jul 7, 2026

Make the deny-all entity resolver a non-overridable floor (Xerces and Android)
ppkarwasz
committed
8459034
Extract HardeningDocumentBuilderFactory and reuse the resolver floor
ppkarwasz
committed
4caa700
Add regression test for external schema-location properties
ppkarwasz
committed
04ea092
Make the schema resource resolver a non-overridable floor
ppkarwasz
committed
bd32bbe
Make the transformer URI resolver a non-overridable floor
ppkarwasz
committed
c4566ae
Make the StAX XML resolver a non-overridable floor
ppkarwasz
committed
b3d8bf8
Resolve relative systemId before delegating to a plain EntityResolver
ppkarwasz
committed
4a17b61
Clarify the resolver-floor Javadoc
ppkarwasz
committed
619fba4
Document the resolver floor in the threat model
ppkarwasz
committed
66c18ff
Set the system id on the XInclude test resolver's InputSource
ppkarwasz
committed
0db292f
Use US spelling consistently in comments and docs
ppkarwasz
committed
9b36075
Merge remote-tracking branch 'apache/main' into feature/resolver-floor
ppkarwasz
committed
4814fc8
Guard resolver-property casts in HardeningXMLInputFactory
ppkarwasz
committed
ba0272e
fix: sort AttackTestSupport
ppkarwasz
committed
16fe01b
fix: simplify HardeningXMLInputFactory
ppkarwasz
committed
a6b7121
Merge Delegating wrappers into their Hardening subclasses
ppkarwasz
committed
bec0fb2
Add trailing newline to files missing EOL at EOF
ppkarwasz
committed
84f8a36
Fold DelegatingXMLReader into HardeningXMLReader
ppkarwasz
committed
863262e

Commits on Jul 8, 2026

Revert EOL
ppkarwasz
committed
30fd1f4
Revert incidental spelling and comma changes
ppkarwasz
committed
3449718
Revert incidental spelling and wording changes
ppkarwasz
committed
b309ee3