commons-jxpath
commons-jxpath copied to clipboard
apache
Apache Commons JXPath
Bumps [org.jdom:jdom](https://github.com:/hunterhacker/jdom) from 1.1.3 to 2.0.2. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: #...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
See https://issues.apache.org/jira/browse/JXPATH-190
# Issue ID: - CVE ID: CVE-2022-41852 - Apache JIRA ID: [JXPATH-201](https://issues.apache.org/jira/browse/JXPATH-201) # Issue Description: Those using JXPath to interpret untrusted XPath expressions may be vulnerable to a remote code...
Those using JXPath to interpret untrusted XPath expressions may be vulnerable to a remote code execution attack. All JXPathContext class functions processing a XPath string are vulnerable except compile() and...
(doc) Added some Unit Tests to increase code coverage
It breaks backwards compatibility with jdom1, so it will have to wait for a new major release of the library.
### JIRA Fixes [XPATH-198](https://issues.apache.org/jira/browse/JXPATH-198) ### Description #### Refactor test class [Context](https://github.com/apache/commons-jxpath/blob/192f4c92727cf5387a8043525a1e1e1533c9ac69/src/test/java/org/apache/commons/jxpath/ri/compiler/ExtensionFunctionTest.java#L388) #### Motivation * Decouple test class `Context` from production interface `ExpressionContext`. * Remove the redundant test child class `Context`...
Bumps [org.apache.commons:commons-parent](https://github.com/apache/commons-parent) from 69 to 70. Changelog Sourced from org.apache.commons:commons-parent's changelog. Apache Commons Parent 70 RELEASE NOTES The Apache Commons Parent team is pleased to announce the release of Apache...