[Muskan Gupta (muskan124947)]

The getDOMSource() method in SQLServerSQLXML.java already sets
FEATURE_SECURE_PROCESSING and uses a custom EntityResolver. This change
applies equivalent protections to getSAXSource() and getStAXSource() for
consistency:

• getSAXSource(): enable FEATURE_SECURE_PROCESSING and disallow-doctype-decl
• getStAXSource(): disable IS_SUPPORTING_EXTERNAL_ENTITIES and SUPPORT_DTD

SQL Server's xml data type rejects DTDs at the storage layer, so these
are defense-in-depth safeguards to ensure all three parser paths are
uniformly hardened.

[Copilot]

Pull request overview

Adds defense-in-depth XML secure-processing configuration when returning SAXSource and StAXSource from SQLServerSQLXML, aligning these code paths more closely with the existing hardening in getDOMSource().

Changes:

• Configure SAXParserFactory with secure-processing and DOCTYPE-disallow features for SAXSource.
• Configure XMLInputFactory to disable external entities and DTD support for StAXSource.

[codecov]

Codecov Report

❌ Patch coverage is 0% with 17 lines in your changes missing coverage. Please review.
✅ Project coverage is 60.59%. Comparing base (415984c) to head (f957080).
⚠️ Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
.../com/microsoft/sqlserver/jdbc/SQLServerSQLXML.java	0.00%	17 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #2915      +/-   ##
============================================
- Coverage     60.61%   60.59%   -0.03%     
+ Complexity     4911     4910       -1     
============================================
  Files           151      151              
  Lines         35000    35016      +16     
  Branches       5854     5854              
============================================
+ Hits          21216    21218       +2     
- Misses        10939    10952      +13     
- Partials       2845     2846       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.