From 494cff695582207441aaa20c6ae20dd14c73950d Mon Sep 17 00:00:00 2001 From: Patrick Gotthard Date: Fri, 4 Mar 2016 23:56:45 +0100 Subject: [PATCH] Added changelog for version 1.6.0 --- README.md | 83 ++++++++++++++++++++++++++++++------------------------- 1 file changed, 45 insertions(+), 38 deletions(-) diff --git a/README.md b/README.md index 2a54423..4beccab 100644 --- a/README.md +++ b/README.md @@ -1,38 +1,45 @@ -# ROME - -[![Maven Central](https://maven-badges.herokuapp.com/maven-central/com.rometools/rome/badge.svg)](https://maven-badges.herokuapp.com/maven-central/com.rometools/rome) - -ROME is a Java framework for RSS and Atom feeds. The framework consist of several modules: - -| Module | Description | -| ------ | ----------- | -| rome-parent | is the parent project for all ROME modules and contains the common Maven configuration. | -| rome-utils | provides utility classes that are used in several ROME modules. | -| rome | is the main RSS and Atom library. It makes it easy to work with most syndication formats: RSS 0.90, RSS 0.91 Netscape, RSS 0.91 Userland, RSS 0.92, RSS 0.93, RSS 0.94, RSS 1.0, RSS 2.0, Atom 0.3, Atom 1.0. | -| rome-modules| enables rome to handle several feed extensions like MediaRSS, GeoRSS and others. | -| rome-opml | contains [OPML](https://en.wikipedia.org/wiki/OPML) parsers and tools. | -| rome-fetcher | is a caching feed fetcher that supports retrieval of feeds via HTTP conditional GET. Supports ETags, GZip compression, and RFC3229 Delta encoding. | -| rome-certiorem | is a [PubSubHubub](https://en.wikipedia.org/wiki/PubSubHubbub) implementation based on rome. | -| rome-certiorem-webapp | is an example webapp for rome-certiorem | -| rome-propono | supports publishing protocols, specifically the Atom Publishing Protocol and the legacy MetaWeblog API. Propono includes an Atom client library, an Atom server framework and a Blog client that supports both Atom protocol and the MetaWeblog API. | - -## Changelog - -### 1.5.1 - -- solved an [XML bomb](https://en.wikipedia.org/wiki/Billion_laughs) vulnerability - -Important note: due to the security fix ROME now forbids all Doctype declarations by default. This will break compatibility with RSS 0.91 Netscape -because it requires a Doctype declaration. When you experience problems you have to activate the property **allowDoctypes** on the SyndFeedInput object. You -should only use this possibility when the feeds that you process are absolutely trustful. - -### 1.5.0 - -- many (untracked) enhancements -- code cleanup -- renamed packages (was required to be able to push to Maven Central after years again) -- updated sourcecode to Java 1.6 - -### Prior to 1.5.0 - -- see [http://rometools.github.io/rome/ROMEReleases](http://rometools.github.io/rome/ROMEReleases) +# ROME + +[![Maven Central](https://maven-badges.herokuapp.com/maven-central/com.rometools/rome/badge.svg)](https://maven-badges.herokuapp.com/maven-central/com.rometools/rome) + +ROME is a Java framework for RSS and Atom feeds. The framework consist of several modules: + +| Module | Description | +| ------ | ----------- | +| rome-parent | is the parent project for all ROME modules and contains the common Maven configuration. | +| rome-utils | provides utility classes that are used in several ROME modules. | +| rome | is the main RSS and Atom library. It makes it easy to work with most syndication formats: RSS 0.90, RSS 0.91 Netscape, RSS 0.91 Userland, RSS 0.92, RSS 0.93, RSS 0.94, RSS 1.0, RSS 2.0, Atom 0.3, Atom 1.0. | +| rome-modules| enables rome to handle several feed extensions like MediaRSS, GeoRSS and others. | +| rome-opml | contains [OPML](https://en.wikipedia.org/wiki/OPML) parsers and tools. | +| rome-fetcher | is a caching feed fetcher that supports retrieval of feeds via HTTP conditional GET. Supports ETags, GZip compression, and RFC3229 Delta encoding. | +| rome-certiorem | is a [PubSubHubub](https://en.wikipedia.org/wiki/PubSubHubbub) implementation based on rome. | +| rome-certiorem-webapp | is an example webapp for rome-certiorem | +| rome-propono | supports publishing protocols, specifically the Atom Publishing Protocol and the legacy MetaWeblog API. Propono includes an Atom client library, an Atom server framework and a Blog client that supports both Atom protocol and the MetaWeblog API. | + +## Changelog + +### 1.6.0 + +- [Upgrade of JDOM to version 2.0.5](https://github.com/rometools/rome/issues/197) +- [Maven plugin and dependency updates](https://github.com/rometools/rome/issues/268) +- [Support for allowing Doctype declarations in rome-fetcher](https://github.com/rometools/rome/issues/234) +- [OSGi improvements](https://github.com/rometools/rome/issues/143) + +### 1.5.1 + +- solved an [XML bomb](https://en.wikipedia.org/wiki/Billion_laughs) vulnerability + +Important note: due to the security fix ROME now forbids all Doctype declarations by default. This will break compatibility with RSS 0.91 Netscape +because it requires a Doctype declaration. When you experience problems you have to activate the property **allowDoctypes** on the SyndFeedInput object. You +should only use this possibility when the feeds that you process are absolutely trustful. + +### 1.5.0 + +- many (untracked) enhancements +- code cleanup +- renamed packages (was required to be able to push to Maven Central after years again) +- updated sourcecode to Java 1.6 + +### Prior to 1.5.0 + +- see [http://rometools.github.io/rome/ROMEReleases](http://rometools.github.io/rome/ROMEReleases)