acl:mode() reads the LinkedDataHub.acl-modes window flags, which were set only on
document load from the response Link headers. On fetch-less switches between
already-loaded tab panes the flags went stale, reflecting the last-loaded
document rather than the activated pane.

Extract the flag-setting into a reusable ldh:SetAclModes template; stamp each
document body with data-acl-modes (from its Link-header modes) via a new
acl-modes param threaded through bs2:Document; re-sync the flags from the
activated pane's data-acl-modes in ldh:ActivateTab, and re-stamp reused panes.

The in-modal live-search onkeyup handler scheduled its deferred search with
<ixsl:schedule-action wait="$delay" document="ixsl:page()">. The document
attribute names fetchable document URIs; the literal string ixsl:page() made
SaxonJS attempt fetch("ixsl:page()"), logging "Fetch API cannot load
ixsl:page(). URL scheme ixsl is not supported" on every debounced keystroke.

The deferred body reaches the live page via ixsl:page() at execution time and
needs no preloaded document, so wait alone is the correct trigger — matching
the typeahead debounce in form.xsl.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* Harden SSRF, XXE, and JWT verification (pen-test remediation)

- URLValidator: block loopback (127.0.0.0/8, ::1) and wildcard (0.0.0.0, ::)
  addresses in addition to link-local/private, and check every resolved address
  to narrow the DNS-rebinding window (LNK-003/LNK-009). ALLOW_INTERNAL_URLS
  remains the development escape hatch. Extend URLValidatorTest.
- SecureXML: hardened parser factories. XSLTMasterUpdater parses with DTDs and
  external entities disabled; ldh:send-request (SendHTTPRequest) parses external
  responses with secure processing (entity-expansion capped) and external
  entities disabled (LNK-005 residual).
- Upgrade java-jwt 3.19.4 -> 4.5.2 on the OAuth2/OIDC verification path; adapt
  the one breaking call (IDTokenFilterBase TokenExpiredException now takes an
  Instant); add JWKS-based JWTVerifier tests.
- Document the pinned-truststore invariant behind the disabled hostname verifier
  on internal HTTP clients.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Do not block loopback in URLValidator (fix http-tests regression)

The loopback block broke the HTTP test suite: it runs entirely on
https://localhost:4443/, so every client-cert WebID is a localhost URI that
WebIDFilter validates on each authenticated request. Blocking loopback turned
those into InternalURLException -> 400 on every authenticated call.

LDH dereferences its own documents/WebIDs on the same origin (loopback in
local/test deployments), and the actual pen-test target (fuseki-admin:3030) is
site-local and already blocked, so loopback blocking added little and fought the
architecture. Keep the wildcard/any-local block and the all-addresses
DNS-rebinding check; leave loopback reachable.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

…nFilter tests (#321)

* Make WebID and JWKS cache TTLs configurable

The WebID model cache and JWKS cache had a hardcoded 1-day expiration (the
TO-DO on the webIDmodelCache field). Read the TTL (seconds) from the
com.atomgraph.linkeddatahub.{webIDCacheExpiration,jwksCacheExpiration} system
properties, wired from WEBID_CACHE_EXPIRATION / JWKS_CACHE_EXPIRATION env vars
via CATALINA_OPTS in the entrypoint, mirroring the CLIENT_* timeout mechanism.
Default stays 86400 (1 day), so behaviour is unchanged; lowering the WebID TTL
bounds how long a revoked WebID stays authenticated.

* Add Dependabot config

Weekly update PRs for Maven dependencies (grouping routine minor/patch bumps),
the Docker base image, and GitHub Actions. The client 4.3.0 -> 5.x drift went
unnoticed for a full major version; automating this prevents a recurrence.

* Add AGENTS.md HTTP API guide for agents

A machine-readable capability manifest for LLM/HTTP agents driving a running
LinkedDataHub instance: the document-as-named-graph model, WebID-TLS auth, the
write discipline (POST/PUT to create, PATCH with application/sparql-update to
update, DELETE to remove — never the read-only SPARQL endpoint), the content
and dataspace model, and the bin/ + Web-Algebra tooling. Mirrors the per-service
AGENTS.md convention REST-VKG already serves.

* Add AuthorizationFilter unit tests

Cover the pure decision logic that had no unit coverage: the HTTP-method to
ACL access-mode contract (GET/HEAD->Read, POST->Append, PUT/DELETE/PATCH->Write),
getAuthorizationByMode lookup, and createOwnerAuthorization granting the owner
Read/Write/Append. No SPARQL or JAX-RS mocking needed.