fix(csdl): escape attributes and reject malformed entity references - #409

Open

NALLSUR wants to merge 8 commits into

mainfrom

surendranalla/arn-237-bug-csdl-parser-accepts-truncated-or-defaulted-schemas-and

Commits on Jul 22, 2026

Decode XML entity references when reading CSDL attributes

nerdsane
and
claude
committed
6a516d2
Escape every attribute value emitted in CSDL metadata

nerdsane
and
claude
committed
a5e8053

Commits on Sep 9, 2026

docs: record CSDL attribute escaping merge intent
rita-aga
committed
5cb1fc5
docs: record PR 409 completion contract and plan
rita-aga
committed
8321e9b
fix: restore dep versions from main; use normalized_value for quick-xml 0.41 compat (clippy)
rita-aga
committed
d77ddae
chore: sync non-spec files to main to restore wasmtime 36 compat (pre-push hook)
rita-aga
committed
3867617
chore: restore automaton files from main to fix is_server_derived_field_name ref
rita-aga
committed
ac03c64
chore: update Cargo.lock after automaton restore
rita-aga
committed
6caefb4