Merge topic/xxe into develop

[mikutoga/TogaGem.git] / CHANGELOG.txt

diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index 0dec860..c5293d0 100644 (file)
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -5,7 +5,10 @@ TogaGem 変更履歴
 
 
 X.XXX.X (XXXX-XX-XX)
+    * Prevent XXE vulnerabilities.
     * Split entity resolver from resource resolver to prevent XXE vulnerability.
+    * Make Schema-factory safe to prevent XXE vulnerability.
+    * Move out xml-xsd info from resolver.
 
 3.121.2 (2019-06-06)
     ・DatatypeIo is public now, for replacing JAXB.