docs|fix|chore(provisioning-agent): SAST Flaws and CHANGELOG

[drcgjung]

WHAT

Addressed four issues from SAST (2XSLT External Entity Disablement, 2Discrepancy between unclean maven deps and clean docker runtime)
Already reference upcoming release in CHANGELOG
Include a cloud-based postgres test which reflects a valid deployment scenario (and its current pitfalls).

WHY

CHANGELOG should reflect release status (TRG)
Render SAST analysis green and close to 100%
include test settings from E2E tests.

FURTHER NOTES

[scherersebastian]

In your docker file provisioning/src/main/docker/Dockerfile you change the permission to 755. I think just the ontop user needs executable permission. Maybe chmod 700 is sufficient enough.

[scherersebastian]

I also added some security docs to your XMLProvider class - makes it easier to understand.
Stylesheet and DTD checks look good :)
Veracode config looks good, too.

[scherersebastian]

For extra points - you could validate the XML to a schema. This is the best way to prevent XML injection attacks.
No pressure :)

[drcgjung]

For extra points - you could validate the XML to a schema. This is the best way to prevent XML injection attacks. No pressure :)

Good point:

#32