GitLab

- Parent project version: 4.0.0 -> 4.1.1  
- authzforce-ce-core-pdp-api: 8.0.0 -> 8.2.0

### Fixed
- Security issues reported by Find Security Bugs plugin

Changed core-pdp-api version

- Code enhancement: replaced Map#put(...) with Map#putIfAbsent(..)
introduced in Java 8

- Updated CHANGELOG with latest changes

- POM: changed project version: 5.0.3-SNAPSHOT -> 6.0.0
- POM: changed dep version: authzforce-ce-core-pdp-api 7.1.2-SNAPSHOT ->
8.0.0-SNAPSHOT
- POM: added owasp-dependency-check plugin
- Replaced classes (Ordered)Deny/PermitOverridesCombiningAlg with
DPOverridesCombiningAlg
- Replaced classes Deny/PermitUnlessPermit/DenyCombiningAlg with
DPUnlessPDCombiningAlg 
- LogicalNOfFunction: first parameter (minimum of TRUE arguments to
return TRUE) checked at Apply parsing time if constant
- Substring function: second and third arguments checked at Apply
parsing time if constant (arg1 >= 0, arg2 == -1 || arg2 >= arg1)
- XACML Condition: expression checked whether constant FALSE -> illegal
(or TRUE -> optimized)
- Fixed issues with unit tests 

- After removing BaseStaticRootPolicyProviderModule from core API, all
RootPolicyProviderModule subclasses now directly implement
StaticRootPolicyProviderModule

Fixed non-regression test OW2-22

- Fixed issue #22 (OW2) with non-regression test
- New feature to set Standard Current Time Environment Attribute
(PDP_ONLY, REQUEST_ELSE_PDP, REQUEST_ONLY) with unit tests
- New features: strictAttributeIssuerMatch=false supported when
retrieving attributes from provider modules (if attribute has Issuer,
Issuer-less copy added to context)
- New way of handling ReturnPolicyIdList (return applicable policies)
with new definition of applicable policies (not returning NotApplicable
and enclosing policy is applicable, if any)
-> changes to response in tests IIIG301,302
- Removed TestApplyMarshalling because we consider no longer the
responsibility of the PDP to be able to marshall XACML instances, but
the caller; in particular classes ApplyExpression,
AttributeDesignatorExpression, AttributeSelectorExpression,
AttributeAssigmnentExpressionEvaluator no longer extending JAXB classes
to simplify and improve code memory usage
- New  utility class StandardCombiningAlgorithms for registry of
standard combining algorithms
- New  utility class StandardEnvironmentAttributes for registry of
standard environment attributes
- - New  utility class StandardFunctions for registry of standard
functions
- Fixed issues with autoboxing/unboxing
- Use of Guava Preconditions.checkNotNull() and ImmutableList
- Use of koloboke HashMap/HashSet
- Removed MutableDecisionResult

- changed pdpStdTimeEnvOverrides into stdEnvTimeProvider with more (3)
options: REQUEST_ELSE_PDP, REQUEST_ONLY, PDP_ONLY

- pdp.xsd:
	- Removed functionSet element (no longer supported)
	- Added attribute 'pdpStdTimeOverrides' boolean for enabling/disabling
PDP issued standard env current date/time override of matching request
attributes
	

- Upgraded dependency version for core-pdp-api: change DecisionResult
and EvaluationContext interface to provided attributes used in
evaluation and pass them to DecisionCache; also FunctionSet and
CombiningAlgSet removed 

for global PDP environment properties to Attribute Provider extensions

Codacy)

- Removed PortRange class already in dependency core-pdp-api