Stefan Bodewig

XMLUnit for Java 2.13.0 adds new options allowing people to strengthen the security of the XML parser used during validation or XPath evaluation and adds an option to specify the locale used to parse patterns in the isDateTime placeholder. Full list of changes: added explicit settings to the Validator classes that disable (external) DTD loading during validation. The default remains to allow loading of external content as this is often a requirement during validation. PRs #331 and #332 by @jmestwa-coder...

XMLUnit for Java 2.13.0 and XMLUnit.NET 2.11.2 Released

This release may require you to adjust you configuration when comparing files that use DTDs. When XMLUnit 2.6.0 has been release it was intended to disallow DTD parsing by default, but due to a bug still allowed it. This has now been fixed. Full list of changes: bumped xmlunit-assertj3's dependency on assert to 3.27.7. This is to make people aware of https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r XMLUnit itself does not use the affected code in AssertJ so the upgrade is...

XMLUnit for Java 2.12.0 Released

This release is identical to XMLUnit for Java 2.10.4 except for the dependency list of the xmlunit-jakarta-jaxb-impl modulle. If you don't use the module, you can ignore this release. Up until XMLUnit 2.10.4 the xmlunit-jakarta-jaxb-impl module depended on org.glassfish.jaxb:jaxb-runtime making it more difficult to chose a different JAXB implementation than necessary (see #313). This dependency has now been removed. If you use the xmlunit-jakarta-jaxb-impl module you may now need to specify the JAXB...

XMLUnit for Java 2.11.0 Released

This is a bugfix release. Fixed bugs: attributes with null values could cause a NullPointerException. Issue #307 PR #309

XMLUnit for Java 2.10.4 Released