Skip to content

Dev#25

Merged
PasinduOG merged 6 commits intomainfrom
dev
Feb 21, 2026
Merged

Dev#25
PasinduOG merged 6 commits intomainfrom
dev

Conversation

@PasinduOG
Copy link
Contributor

No description provided.

…Check

BREAKING CHANGE: Security features now require explicit opt-in via field annotations

Major Changes:
- Introduced @AutoTrim annotation for opt-in whitespace trimming
- Introduced @XssCheck annotation for opt-in XSS validation
- Removed @notrim annotation (no longer needed with opt-in approach)
- Changed default behavior: fields are NOT modified unless explicitly annotated

Migration Required:
Previously in v1.2.0, all string fields were automatically trimmed and XSS-validated.
In v1.3.0, you must explicitly annotate fields with @AutoTrim or @XssCheck.

Example:
```java
// Before (v1.2.0)
public class UserDTO {
    private String username;  // Was automatically trimmed
    private String comment;   // Was automatically XSS-validated
}

// After (v1.3.0) - Add annotations
public class UserDTO {
    @AutoTrim
    private String username;

    @XssCheck
    private String comment;
}
feat!: Release v1.3.0 - Opt-in Security Model with @AutoTrim and @xss
- Added -Dgpg.passphrase system property to the mvn deploy command in the GitHub Actions workflow.
- Resolves the "Unable to decrypt gpg passphrase" error during Maven Central deployment.
ci: fix maven deploy by passing GPG passphrase argument
ci: simplify publish workflow
@PasinduOG PasinduOG self-assigned this Feb 21, 2026
@PasinduOG PasinduOG merged commit 08e4a32 into main Feb 21, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant