Update XMLHandler

[kevin-mcgoldrick]

Update XMLHandler

Removes the jdom2 dependency and rewrites GenericXMLHandler on top of the JDK's built-in java.xml APIs (org.w3c.dom DOM + javax.xml XPath/Transformer). jdom2 is being dropped because the XML exception types it throws have been removed from the Java runtime.

What changed

• jdom2 removed from all POMs that declared it (pom.xml, agent_common, script_processor, web/web_ui).
• GenericXMLHandler rewritten using DOM / XPath / Transformer:
  • Read (GetElementText, GetElementAttr, GetElementList, xPathExists), write (SetElementText, SetElementAttribute, Save), and toString() reimplemented with no jdom2 types.
  • Create-on-write preserved — SetElementText/SetElementAttribute still build any missing path segments (and the root element) via a new resolveOrCreateElement helper, so XMLRequest can construct a body from an empty document as before.
• XXE hardening on the shared parser/transformer factories: disallow-doctype-decl, external general/parameter entities disabled, XInclude off, entity-reference expansion off, and external DTD/stylesheet access cleared on the transformer.
• Dead code removed — the empty JsonHandler / JsonHandlerTest classes are deleted.

Tests

• Replaced the disabled, auto-generated (@generatedBy CodePro) stubs in GenericXMLHandlerTest / XMLRequestTest with real assertions covering both the string- and file-based constructor paths, get/set of text & attributes, GetElementList, xPathExists (positive and negative), isXMLValid (valid + invalid), clone, and the path helpers.
• mvn clean test for agent_common is green.

Please make sure these check boxes are checked before submitting

• ** Squashed Commits **
• ** All Tests Passed ** - mvn clean test -P default

** PR review process **

• Requires one +1 from a reviewer
• Repository owners will merge your PR once it is approved.

[Zakaria-Kofiro]

GetElementAttr breaks its existing attribute-XPath contract. Expressions such as root/child/@first now return ""; element expressions instead concatenate every attribute value.

[Zakaria-Kofiro]

Namespace handling is nonfunctional. XPath instances never receive a NamespaceContext, parsing is not namespace-aware, and createElementNS receives a name with the prefix removed. The user-facing ns: request configuration therefore cannot create namespaced XML.

[Zakaria-Kofiro]

evaluate(...) returns the XPath string value here, not the matched node. This makes existing empty elements report false, unlike the previous node-based implementation. Could this evaluate with XPathConstants.NODE and check for null? Please add coverage for <root><empty/></root>.

[Zakaria-Kofiro]

XXE hardening fails open. If one provider-specific feature is unsupported, the remaining features are skipped and parsing continues. Standard ACCESS_EXTERNAL_DTD/ACCESS_EXTERNAL_SCHEMA parser restrictions are also absent.