Skip to content

Commit ff6a12e

Browse files
committed
Update Readme for v1.7 and associated updates.
1 parent bfb9b2e commit ff6a12e

1 file changed

Lines changed: 13 additions & 0 deletions

File tree

README.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,19 @@ then I do love-me-some-coffee!*
1818

1919
## Updates / Change Log
2020

21+
##### Updated the project to v1.7 with the following:
22+
- XXE Scripting Vulnerability Mitigation: Added secure processing features to XML parsing to mitigate XXE vulnerabilities as per OWASP recommendations.
23+
- The rendering process is now using a fully streaming (SAX) pipeline that is secured (no XXE allowed) — NO DOM is built and NO identity transform hop is necessary anymore.
24+
- Fix Thread safety issues with FopFactory initialization with improved locking to create the singleton to mitigate risk of race conditions across multiple concurrent requests.
25+
- Implement support for dynamic re-initialization when potentially recoverable errors may occur and/or if FOP Factory corruption occurs (e.g. Font Cache corruption).
26+
- Updated all maven dependencies to latest stable versions.
27+
- Improve error handling for requests now identifying invalid/malformed XML requests as 400-BadRequest instead of Http 500-InternalServerError.
28+
- Improve error logging when exceptions occur.
29+
- Fix Error handling to safely handle and return exceptions as valid Json responses that are compliant with the ApacheFOP.Serverless C# client -- which looks for Json to extract the 'detailMessage' value.
30+
- Fix issues with Azure Functions internal pipeline throwing ClassCastExceptions where RpcHttpDataTarget cannot be cast to class TypedData$Builder; resolved by the aforementioned error handling changes.
31+
- Cleanup and fix non-critical items in the KeepWarm.fo source to minimize issues when rendering.
32+
- Fix <default-page-settings> configuration value to correctly initialize US-Letter size as default.
33+
2134
##### Updated the project to v1.6 with the following:
2235
- Updated Apache FOP to v2.11 (latest as of 2025-05-20).
2336
- Update to now use Java Azure Functions v4 (v3 is fully deprecated by end of 2022).

0 commit comments

Comments
 (0)