ppkarwasz opened a new pull request, #83: URL: https://github.com/apache/commons-secure-xml/pull/83
The threat model page opened with the stock Commons security boilerplate and closed with a vulnerability list and a deserialization pointer, all of which the Security page already carried. On a page whose whole job is the model, the repetition dilutes it for a reader and feeds irrelevant context to an agent consuming it. - **Threat model page:** the three repeated sections and the `Threat Model` wrapper heading are gone, and everything moved up a level. The bold pseudo-headings became real subsections, and so did the fourteen cases under "What is out of scope" and "Settings you may modify" — several ran seven to twelve lines with their own paragraphs and nested lists. "Reserved settings" and "Settings you may modify" moved out of "Assumptions about the environment", which now holds only what is genuinely environmental. - **Security page:** migrated from xdoc to Markdown, the last hand-written xdoc on this site; the other xdocs are commons-build-plugin output. Doxia derives heading ids the same way for both formats, so the anchors carry over unchanged. The supported release line, previously stated only in `SECURITY.md`, is now on the site too. - **Links:** every intra-page link on the threat model page used a GitHub slug (`#what-is-in-scope`) where the rendered page has `What_is_in_Scope`, so all 23 were dead. The Javadoc overview's links to the threat model and to the Maven coordinates resolved inside `apidocs/` and 404ed. The site descriptor still named the project Apache Commons Text, which the skin printed in every page title. Verified with `mvn clean site`: 83 project links across the five pages resolve, in-page anchors and relative links alike; `security.html` keeps its four anchors and gains `Supported_Versions`; `threat_model.html` carries 30, all reachable. **Reviewing:** compare with whitespace ignored — Files changed → the gear icon → Hide whitespace, or append `?w=1` to the URL. Promoting the list items required de-indenting their bodies out of list continuation and rewrapping them in semantic line breaks, which otherwise shows up as a rewrite of prose that did not change. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
