Skip to content

chore(release): prepare v1.1.0 release#2

Merged
PasinduOG merged 1 commit intodevfrom
feature/v1.1.0
Feb 17, 2026
Merged

chore(release): prepare v1.1.0 release#2
PasinduOG merged 1 commit intodevfrom
feature/v1.1.0

Conversation

@PasinduOG
Copy link
Copy Markdown
Contributor

BREAKING CHANGES: None - Fully backward compatible with v1.0.0

New Features:

  • Add strictJsonCustomizer() with automatic XSS prevention via HTML tag rejection
  • Add automatic strict JSON property validation (mass assignment prevention)
  • Add GlobalExceptionHandler with 10 built-in exception handlers
  • Add TraceIdFilter for distributed tracing with MDC integration
  • Add abstract ApiException class for custom business exceptions
  • Add RFC 9457 ProblemDetail format for all error responses
  • Add automatic trace ID generation with UUID format
  • Add comprehensive Javadoc with zero warnings

Security Enhancements:

  • Implement fail-fast HTML tag detection and rejection
  • Add strict JSON validation to prevent mass assignment attacks
  • Add automatic string sanitization with whitespace trimming
  • Add null value preservation in DTOs
  • Prevent XSS, HTML injection, and JavaScript injection attacks

Documentation:

  • Add dedicated 'Built-in Security Features' section in README
  • Add comprehensive distributed tracing documentation
  • Add enhanced TraceIdFilter examples with header propagation
  • Add complete exception handling examples
  • Document trace ID priority and MDC integration
  • Add migration guide from v1.0.0 to v1.1.0

BREAKING CHANGES: None - Fully backward compatible with v1.0.0

New Features:
- Add strictJsonCustomizer() with automatic XSS prevention via HTML tag rejection
- Add automatic strict JSON property validation (mass assignment prevention)
- Add GlobalExceptionHandler with 10 built-in exception handlers
- Add TraceIdFilter for distributed tracing with MDC integration
- Add abstract ApiException class for custom business exceptions
- Add RFC 9457 ProblemDetail format for all error responses
- Add automatic trace ID generation with UUID format
- Add comprehensive Javadoc with zero warnings

Security Enhancements:
- Implement fail-fast HTML tag detection and rejection
- Add strict JSON validation to prevent mass assignment attacks
- Add automatic string sanitization with whitespace trimming
- Add null value preservation in DTOs
- Prevent XSS, HTML injection, and JavaScript injection attacks

Documentation:
- Add dedicated 'Built-in Security Features' section in README
- Add comprehensive distributed tracing documentation
- Add enhanced TraceIdFilter examples with header propagation
- Add complete exception handling examples
- Document trace ID priority and MDC integration
- Add migration guide from v1.0.0 to v1.1.0
@PasinduOG PasinduOG self-assigned this Feb 17, 2026
@PasinduOG PasinduOG merged commit b006b53 into dev Feb 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant