Merge pull request #398 from finos/update-changes

Added changes for release
finos · May 31, 2023 · 2ca99f1 · 2ca99f1
2 parents 7d9eed9 + d8bc444
commit 2ca99f1
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 4 deletions.
diff --git a/CHANGES.md b/CHANGES.md
@@ -233,5 +233,12 @@ Major release of chat workflow.  Most interfaces for this changed.  See migratio
  - #340 Running selfcontained spring boot jar (fat jar) fails on help command
  - #282 Fix The PollBot
  - Release 9.0.1
-
+
+# May 31 2023
+
+ - #390 Improved documentation for FINOS Active badge
+ - #387 Fixed CVEs, rolled out FINOS Security Scanning
+ - #386 Fixed Teams File State Storage
+ - #380 Removing GPL-licensed dependency in Reminder Bot
+ - #378 Added retry logic for teams
 
diff --git a/...ter/src/main/java/org/finos/springbot/symphony/content/serialization/MessageMLParser.java b/...ter/src/main/java/org/finos/springbot/symphony/content/serialization/MessageMLParser.java
@@ -38,9 +38,7 @@
 public class MessageMLParser extends AbstractContentParser<String, EntityJson>{
 
 	private static final Logger LOG = LoggerFactory.getLogger(PresentationMLHandler.class);
-
-	private SAXParserFactory factory = SAXParserFactory.newInstance();
-
+
 	static class TagFrame<X extends Tag> extends TextFrame<X> {
 
 		String id;
@@ -102,6 +100,8 @@ public Message apply(String message, EntityJson jsonObjects) {
 		Content [] out = { null };
 
 		try {
+			SAXParserFactory factory = SAXParserFactory.newInstance();
+			factory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);          
 			SAXParser saxParser = factory.newSAXParser();
 			saxParser.parse(new InputSource(new StringReader(message)), new DefaultHandler2() {