Quentin Ligier

Allow response caching of files and json content

1

This is a solution for issue #318. It allows to control the use of _Pragma_ and _Cache-Control_ headers in `$response->file()` and `$response->json()` methods. Unit tests are added to check the...

WIP: Implement the ITI-48 transaction (Retrieve Value Set, SOAP)

7

This is an implementation of the IHE ITI-48 transaction, Retrieve Value Set, for the SOAP binding only. It introduces new modules: `ipf-commons-ihe-svs` and `ipf-platform-camel-ihe-svs` (SVS for Sharing Value Sets profile)....

Hi, I'm wondering if `SchematronResourceXSLT` is thread-safe when initialized? `SchematronResourcePure` says in its javadoc that it's thread-safe when it's initialized because the underlying cache is thread-safe. As `SchematronResourceXSLTCache` is also...

XPath 2 variable substitution in Pure Schematron

4

Hi, I'm trying to use the Pure Schematron validator but I've encountered an issue with variable substitution. The Schematron I deal with uses _let_ statements with XPath 2 patterns, and...

Hey, I've read the spec but I'm still not sure what number formats are allowed in integer and floating point types. Based on the Ruby and JS implementations, I think...

ITI47: omissions are not necessarily restrictions

2

In ITI-47 (PDQV3 Query), some elements (like _birthPlace_) are "omitted", while they are authorized (explicitly listed) in ITI-44 (PIX Feed). [CP-ITI-1293](https://docs.google.com/document/d/1HGjaFOFw_laMXXZUXVa8jQhapWWhjWFm/edit) has been filled to clarify the profile on that...

Insecure Transformer used in XmlParsers

1

The Transformer used in XmlParsers (all versions) is insecure to XEE attacks (r5 shown here): https://github.com/hapifhir/org.hl7.fhir.core/blob/dd9dd6b64aca4645aa3a444d011a6930d3acf58c/org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/XmlParser.java#L146-L147 See https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#transformerfactory The current Saxon-HE version (9.8) does not support XMLConstants.ACCESS_EXTERNAL_DTD or XMLConstants.ACCESS_EXTERNAL_SCHEMA (_java.lang.IllegalArgumentException:...

When the `integrity` attribute is used on script/link elements, it isn't updated after optimization of the JS/CSS content and prevents the browser from evaluating the resource. E.g. ```html ``` Resulting...

CH Core Practitioner EPR: GLN identifier cardinality

7

`CHCorePractitionerEPR.identifier:GLN` is 1..1. In the HPD, an individual provider can have multiple GLN identifiers: hcIdentifier is multivalued, and the description says: > Es wird geprüft, ob es **mindestens** einen Wert...

CH Core Organization EPR: address cardinality

2

`CHCoreOrganizationEPR.address` is 0..1. In the HPD, an organizational provider can have multiple addresses: hpdProviderPracticeAddress, hpdProviderBillingAddress, hpdProviderMailingAddress, hpdProviderLegalAddress. Some are even multi-valued. To use CHCoreOrganizationEPR in the mHealth integration of mCSD,...