Merge pull request #383 from fugerit-org/382-chore-update-fj-core-867

fj-core version set to 8.6.7 #382

Author: fugerit79

CHANGELOG.md

@@ -9,9 +9,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
+- fj-core version set to 8.6.7 <https://github.com/fugerit-org/fj-doc/issues/382>
 - quarkus-version set to 3.21.1 across all the modules <https://github.com/fugerit-org/fj-doc/pull/344>
 
-
 ## [8.12.7] - 2025-03-26
 
 ### Changed

fj-doc-base/src/main/java/org/fugerit/java/doc/base/xml/DocXmlParser.java

@@ -58,7 +58,7 @@ public DocXmlParser() {
 	protected DocBase parseWorker(Reader reader) throws DocException {
 		return SafeFunction.get( () -> {
 			DocContentHandler dch =  new DocContentHandler( this.docHelper, this.isFailWhenElementNotFound() );	
-			SAXParser parser = XMLFactorySAX.makeSAXParser( false ,  true );
+			SAXParser parser = XMLFactorySAX.makeSAXParserSecure( false ,  true );
 			DefaultHandlerComp dh = new DefaultHandlerComp( dch );
 			parser.parse( new InputSource(reader), dh);
 			return dch.getDocBase();

fj-doc-val-core/src/main/java/org/fugerit/java/doc/val/core/basic/XmlValidator.java

@@ -22,7 +22,7 @@ public XmlValidator() {
 
 	@Override
 	public DocTypeValidationResult validate(InputStream is) throws IOException {
-		return this.validationHelper( () -> XMLFactorySAX.makeSAXParser( true, true ).parse( is , new DefaultHandler() ) );
+		return this.validationHelper( () -> XMLFactorySAX.makeSAXParserSecure( true, true ).parse( is , new DefaultHandler() ) );
 	}
 
 }

pom.xml

@@ -25,7 +25,7 @@
 	    <maven.compiler.target>${java-version-compliance}</maven.compiler.target>	
 	    <maven.compiler.release>${java-version-compliance}</maven.compiler.release>
 	    <!-- fj java versions -->
-	    <fj-version>8.6.6</fj-version>
+	    <fj-version>8.6.7</fj-version>
 	    <fj-doc-version>${project.version}</fj-doc-version>
 		<fj-doc-maven-plugin-version>${fj-doc-version}</fj-doc-maven-plugin-version>
 	    <fj-xml-to-json-version>1.2.1</fj-xml-to-json-version>