Merge topic/xxe into develop

[mikutoga/TogaGem.git] / CHANGELOG.txt

diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index 8577d10..c5293d0 100644 (file)
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -4,6 +4,12 @@
 TogaGem 変更履歴
 
 
+X.XXX.X (XXXX-XX-XX)
+    * Prevent XXE vulnerabilities.
+    * Split entity resolver from resource resolver to prevent XXE vulnerability.
+    * Make Schema-factory safe to prevent XXE vulnerability.
+    * Move out xml-xsd info from resolver.
+
 3.121.2 (2019-06-06)
     ・DatatypeIo is public now, for replacing JAXB.