v5.0.3

🐞 Bug Fixes

• XMLReader created by SaxUtils does not prevent external entity access #1873
• XMLInputFactory built by AxiomSoapMessageFactory is never used #1872
• handleFault is called for an interceptor even when the response is no longer a fault #1871
• handleResponse is called on an interceptor whose handleRequest threw an exception #1867
• Auto-discovered SmartEndpointInterceptor beans ignore Ordered #1865
• Received XMPP stanzas should be logged at debug level #1863
• Common name is not extracted when it ends the subject DN #1862
• Align DTD handling across all payload source types in JAXB method processors #1860
• Adding header element is not reflected in SAAJ message #1849
• SOAP WS-Addressing MessageId header is always required when receiving message using Addressing10 #1848
• CommonXsdSchemaCollection fails to resolve XSDs imported with relative path #1450

📔 Documentation

• Complete SAML support documentation #1948
• Document that the default exception resolver exposes exception messages to callers #1874
• Document where the JMS transport sends responses #1864
• Document the effect of skipping WS-Security validation #1861
• Document safe scoping of security interceptors #1850
• Document how to enable MTOM with JAXB #982

🔨 Dependency Upgrades

• Upgrade to SAAJ 3.0.6 #1926
• Upgrade to Spring Framework 7.0.10 #1930
• Upgrade to Spring Security 7.0.8 #1944
• Upgrade to WSS4J 4.0.2 #1927

❤️ Contributors

Thank you to all the contributors who worked on this release:

@arimu1 and @goutamadwant