Discussion:
Joining the Xalan project
Michael Glavassevich
2017-09-20 20:46:36 UTC
Permalink
Yes, the Xalan project (and Xerces too) very much needs more active
developers. If folks are interested in contributing, I'm all for making
that easier, adding them as committers so that they can make direct
contributions. Both PMCs would also benefit from having more active people
too.

Thanks.

Michael Glavassevich
XML Technologies and WAS Development
IBM Toronto Lab
Hello!
If no one has time to handle these items, would it be possible to
join the project so that I can get involved in fixing them
directly? I've already done all the Apache CLA stuff.
Adding some active members to the project would be a good thing.
There's a few security-related bugs reported years ago and still not
patched, like https://urldefense.proofpoint.com/v2/url?
u=https-3A__issues.apache.org_jira_browse_XALANC-2D762&d=DwIDaQ&c=jf_iaSHvJObTbx-
siA1ZOg&r=KSsQtaTrbQnz98UqasbfUccVGXxb9hHxwso62zJ-
DKI&m=g9kVMHKy4BPR2zFEUZwwTJL_ry4IJsUZYWH05WmBDBg&s=KNPKJ9Gm3UO6Kzep6Zhix-
pAMD0APtZOXpgvq15yvM4&e=
If the project gets active again, I'd be more than happy to report all
the security bugs I identified in xalan-c while fuzzing XSLT engines.
Regards,
Nicolas
---------------------------------------------------------------------
Loading...