As noted this release includes a security vulnerability, the user guide
link is
http://docs.geotools.org/latest/userguide/library/metadata/geotools.html#xml
New hints are available for use with DocumentFactory
<http://docs.geotools.org/latest/javadocs/org/geotools/xml/DocumentFactory.html>
and the WebMapServer
<http://docs.geotools.org/latest/javadocs/org/geotools/data/wms/WebMapServer.html#WebMapServer-java.net.URL-org.geotools.data.ows.HTTPClient-java.util.Map->
client.
The key point is the use of a PreventLocalEntityResolver *by default* -
this represents a change in functionality that may affect your application.
If you need to restore "the way things were" use:
*Hints.putSystemDefault(Hints.ENTITY_RESOLVER,
NullEntityResolver.INSTANCE);*
The documentation on Hints
<http://docs.geotools.org/latest/userguide/library/metadata/geotools.html#hints>
has
also been updated with an example of system property bindings for this
setting (-Dorg.xml.sax.EntityResolver=org.geotools.xml.NullEntityResolver)
to be used if you are working in an environment where you do not control
application startup and initialization.
--
Jody Garnett
On 15 October 2016 at 16:55, Jody Garnett <[email protected]> wrote:
> The GeoTools team is pleased to announce GeoTools 15.2.
>
> - geotools-15.2-bin.zip
>
> <https://sourceforge.net/projects/geotools/files/GeoTools%2015%20Releases/15.2/geotools-15.2-bin.zip/download>
> - geotools-15.2-doc.zip
>
> <https://sourceforge.net/projects/geotools/files/GeoTools%2015%20Releases/15.2/geotools-15.2-doc.zip/download>
> - geotools-15.2-userguide.zip
>
> <https://sourceforge.net/projects/geotools/files/GeoTools%2015%20Releases/15.2/geotools-15.2-userguide.zip/download>
> - geotools-15.2-project.zip
>
> <https://sourceforge.net/projects/geotools/files/GeoTools%2015%20Releases/15.2/geotools-15.2-project.zip/download>
>
> This release is also available from our Maven repository
> <http://download.osgeo.org/webdav/geotools/>. This release is made in
> conjunction with GeoWebCache 1.9.2 and GeoServer 2.9.2. We would like to
> thank those who have contributed fixes and features to this release.
>
> GeoTools 15.2 is the latest stable release of the 15.x series and is
> recommended for all new projects.
>
> Security considerations:
>
> - The library now defaults to using PreventLocalEntityResolver for
> improved security. For more details (and how to disable this behavior)
> please see the GeoTools user guide
>
> <http://docs.geotools.org/latest/userguide/library/metadata/geotools.html#xml>
> .
>
> Features and Improvements:
>
> - Styling improvements include support for SE 1.1 external marks (with
> mark index)
> - Parsing hints can now be provided for WMS and WFS clients (entity
> resolver hint and and DTD disabling hint provided).
> - Overview policy parameter now available for ImageMosaic.
> - Support for integrated water column climatological time in NetCDF
> files
> - ImagePyramid support for multiple coverages
>
>
>
>
>
> Bug Fixes:
>
> - SLD graphics now correctly handle mix of mark and external graphic
> choosing the first one supported.
> - External marks with mark index fixes for both copying and SE 1.1
> parsing.
>
> For more information please see the release notes (15.2
> <https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?projectId=10001&version=13600>
> | 15.1
> <https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?version=13000&styleName=Text&projectId=10001>
> | 15.0
> <https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?version=13002&styleName=&projectId=10001&Create=Create&atl_token=BMGO-EVM2-SZYH-VJUH%7C60a562a29d3c23854fbe594a81086dd4338711c1%7Clout>
> | RC1
> <https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?version=12900&styleName=&projectId=10001&Create=Create&atl_token=BMGO-EVM2-SZYH-VJUH%7C3d37bc9c7749ef20bde1d4b83ac230c95ac1efc3%7Clout>
> | Beta 2
> <https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?version=12601&styleName=&projectId=10001&Create=Create&atl_token=BMGO-EVM2-SZYH-VJUH%7C3d37bc9c7749ef20bde1d4b83ac230c95ac1efc3%7Clout>
> | Beta 1
> <https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?version=12101&styleName=&projectId=10001&Create=Create&atl_token=BMGO-EVM2-SZYH-VJUH%7C3d37bc9c7749ef20bde1d4b83ac230c95ac1efc3%7Clout>
> | M0
> <https://osgeo-org.atlassian.net/secure/ReleaseNote.jspa?version=11402&styleName=&projectId=10001&Create=Create&atl_token=BMGO-EVM2-SZYH-VJUH%7C3d37bc9c7749ef20bde1d4b83ac230c95ac1efc3%7Clout>
> ).
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
GeoTools-GT2-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geotools-gt2-users
