summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLiZi <li.zi30@zte.com.cn>2018-02-24 04:25:32 -0500
committerLiZi <li.zi30@zte.com.cn>2018-02-24 04:25:58 -0500
commitb0512c0b66d91ca71a53e4f4b9073a2b509d0eaf (patch)
tree8fe08031cc74df2b231641f4d22b64b4f3701e6b
parentb595576737ce9cf1b1e1db3589f549ca36bc73f6 (diff)
Fix the security issue of esr server.
Fix the security issue CVE-2016-3720 and CVE-2017-17485 Change-Id: I3f7d0c4fb841d72e2b463091a5c4b5e5e81f0611 Issue-ID: AAI-592 Signed-off-by: LiZi <li.zi30@zte.com.cn>
-rw-r--r--esr-mgr/pom.xml12
1 files changed, 12 insertions, 0 deletions
diff --git a/esr-mgr/pom.xml b/esr-mgr/pom.xml
index 58d7932..33a0c1c 100644
--- a/esr-mgr/pom.xml
+++ b/esr-mgr/pom.xml
@@ -141,11 +141,23 @@
<dependency>
<groupId>io.swagger</groupId>
<artifactId>swagger-jersey2-jaxrs</artifactId>
+ <exclusions>
+ <exclusion>
+ <groupId>com.fasterxml.jackson.dataformat</groupId>
+ <artifactId>jackson-dataformat-xml</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.9.4</version>
+ <exclusions>
+ <exclusion>
+ <groupId>com.github.roskart.dropwizard-jaxws</groupId>
+ <artifactId>dropwizard-jaxws</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<!-- jersey -->
<dependency>