You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+13Lines changed: 13 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,6 +18,19 @@ then I do love-me-some-coffee!*
18
18
19
19
## Updates / Change Log
20
20
21
+
##### Updated the project to v1.7 with the following:
22
+
- XXE Scripting Vulnerability Mitigation: Added secure processing features to XML parsing to mitigate XXE vulnerabilities as per OWASP recommendations.
23
+
- The rendering process is now using a fully streaming (SAX) pipeline that is secured (no XXE allowed) — NO DOM is built and NO identity transform hop is necessary anymore.
24
+
- Fix Thread safety issues with FopFactory initialization with improved locking to create the singleton to mitigate risk of race conditions across multiple concurrent requests.
25
+
- Implement support for dynamic re-initialization when potentially recoverable errors may occur and/or if FOP Factory corruption occurs (e.g. Font Cache corruption).
26
+
- Updated all maven dependencies to latest stable versions.
27
+
- Improve error handling for requests now identifying invalid/malformed XML requests as 400-BadRequest instead of Http 500-InternalServerError.
28
+
- Improve error logging when exceptions occur.
29
+
- Fix Error handling to safely handle and return exceptions as valid Json responses that are compliant with the ApacheFOP.Serverless C# client -- which looks for Json to extract the 'detailMessage' value.
30
+
- Fix issues with Azure Functions internal pipeline throwing ClassCastExceptions where RpcHttpDataTarget cannot be cast to class TypedData$Builder; resolved by the aforementioned error handling changes.
31
+
- Cleanup and fix non-critical items in the KeepWarm.fo source to minimize issues when rendering.
32
+
- Fix <default-page-settings> configuration value to correctly initialize US-Letter size as default.
33
+
21
34
##### Updated the project to v1.6 with the following:
22
35
- Updated Apache FOP to v2.11 (latest as of 2025-05-20).
23
36
- Update to now use Java Azure Functions v4 (v3 is fully deprecated by end of 2022).
0 commit comments