Sharpen the threat model: honored JAXP contracts, XInclude, and expansion limits - #66

Merged

ppkarwasz merged 10 commits into

apache:mainfrom

ppkarwasz:docs/honored-jaxp-contracts

Sep 1, 2026

Commits on Sep 1, 2026

Document honored JAXP contracts in the threat model
ppkarwasz
committed
00a4c66
Merge branch 'main' into docs/honored-jaxp-contracts
ppkarwasz
authored
390b638
Scope the XInclude guarantee to the Xerces convention
ppkarwasz
committed
502b4f2
Correct a stale factory class name in the threat model
ppkarwasz
committed
c985cc6
Require the schema resolver contract in the threat model
ppkarwasz
committed
20e9ac7
Separate expansion count from expansion volume in the threat model
ppkarwasz
committed
eee68dc
Name the source of the entity-expansion bound in the package Javadoc
ppkarwasz
committed
841fdf3
fix: improve entity expansion disclaimer
ppkarwasz
committed
6045618
fix: review threat model
ppkarwasz
committed
1646ba7
fix: bundled -> external
ppkarwasz
committed
894fd4b