Expand description
Confined virtual-root XSD schema-set discovery.
Discovers the transitive xs:import/xs:include closure reachable from one
root schema file and packages it as a SchemaSet: root-relative virtual
lookup keys to schema bytes, plus the supplied absolute-URI alias map. The
Java resolver serves supplied keys only, so every distinct reachable virtual
key is transmitted even when two keys share one canonical file.
Security posture (ADR-0032): schema locations and alias values are untrusted input. Reads are confined to the canonicalized schema root, every candidate is canonicalized and containment-checked before any read, non-regular files are refused (no pipe hangs), no network access exists, no external DTD/entity is loaded, and the 256-key / 8 MiB / 128-alias / 32-level caps fail closed as keys are discovered.
Structs§
- Schema
Set - A discovered schema set, keyed for transmission to the XML bridge.
Constants§
- MAX_
IMPORT_ DEPTH - Maximum number of newly expanded discovery states on one traversal path.
- MAX_
SCHEMA_ ALIASES - Maximum number of supplied absolute-URI alias mappings.
- MAX_
SCHEMA_ BYTES - Maximum sum of transmitted byte values across all
resourcesentries. - MAX_
SCHEMA_ RESOURCES - Maximum number of transmitted
SchemaSet::resourcesentries.
Functions§
- discover_
schema_ set - Discovers the schema set reachable from
rootunder the supplied aliases.