summaryrefslogtreecommitdiffstats
path: root/ecomp-sdk/epsdk-app-common/pom.xml
diff options
context:
space:
mode:
authorsa282w <sa282w@att.com>2018-04-02 11:33:14 -0400
committersa282w <sa282w@att.com>2018-04-02 11:33:14 -0400
commitd8c81e748f1db2fbd2bdd810671d90894af35d69 (patch)
treee532c473e94cc561ed6aafb8b728ff666ac0090c /ecomp-sdk/epsdk-app-common/pom.xml
parent19a214bd35c126067ea6c07825d1e58edf336c50 (diff)
Security Vunerabilities
Issue-ID: PORTAL-155 Excluded beanshell dependency from epsdk-common, epsdk-core and epsdk-fw pom.xml. Change-Id: I068bd1134269a162a64710abc92aacf9cbba32d3 Signed-off-by: sa282w <sa282w@att.com>
Diffstat (limited to 'ecomp-sdk/epsdk-app-common/pom.xml')
-rw-r--r--ecomp-sdk/epsdk-app-common/pom.xml24
1 files changed, 14 insertions, 10 deletions
diff --git a/ecomp-sdk/epsdk-app-common/pom.xml b/ecomp-sdk/epsdk-app-common/pom.xml
index 6e4f9e19..f31aa797 100644
--- a/ecomp-sdk/epsdk-app-common/pom.xml
+++ b/ecomp-sdk/epsdk-app-common/pom.xml
@@ -172,11 +172,11 @@
<groupId>org.elasticsearch</groupId>
<artifactId>elasticsearch</artifactId>
<version>2.2.0</version>
- <exclusions>
- <exclusion>
- <groupId>org.apache.lucene</groupId>
- <artifactId>lucene-queryparser</artifactId>
- </exclusion>
+ <exclusions>
+ <exclusion>
+ <groupId>org.apache.lucene</groupId>
+ <artifactId>lucene-queryparser</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
@@ -242,7 +242,7 @@
<groupId>org.owasp.esapi</groupId>
<artifactId>esapi</artifactId>
<version>2.1.0</version>
- <exclusions>
+ <exclusions>
<exclusion>
<groupId>commons-beanutils</groupId>
<artifactId>commons-beanutils-core</artifactId>
@@ -251,7 +251,7 @@
<groupId>commons-httpclient</groupId>
<artifactId>commons-httpclient</artifactId>
</exclusion>
- <exclusion>
+ <exclusion>
<groupId>xerces</groupId>
<artifactId>xercesImpl</artifactId>
</exclusion>
@@ -259,6 +259,10 @@
<groupId>commons-collections</groupId>
<artifactId>commons-collections</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>org.beanshell</groupId>
+ <artifactId>bsh-core</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<!-- Jacoco for offline instrumentation -->
@@ -268,7 +272,6 @@
<version>${jacoco.version}</version>
<classifier>runtime</classifier>
</dependency>
-
<dependency>
<groupId>com.thoughtworks.xstream</groupId>
<artifactId>xstream</artifactId>
@@ -309,8 +312,9 @@
<groupId>xalan</groupId>
<artifactId>xalan</artifactId>
<version>2.7.2</version>
- </dependency>
- <dependency>
+ </dependency>
+ <dependency>
+
<groupId>xerces</groupId>
<artifactId>xercesImpl</artifactId>
<version>2.11.0.SP5</version>