diff options
| author |   Denes Nemeth <denes.nemeth@nokia.com> | 2018-03-24 14:00:54 +0100 |
|---|---|---|
| committer | Denes Nemeth <denes.nemeth@nokia.com> | 2018-03-25 21:32:03 +0200 |
| commit | c82c886215ed34953a51dff0710c6bd15cb80ee4 (patch) | |
| tree | 783f928ba8e033bbf55b6cffa343c7ea47c40b59 /nokiav2/driver/pom.xml | |
| parent | 1489e4215e075ab3ffe8f7158559a38778cd0b34 (diff) | |
Removing jackson to mitigate cve-2017-4995
Signed-off-by: Denes Nemeth <denes.nemeth@nokia.com>
Issue-ID: VFC-728
Change-Id: Ib495d4706361cc39527dfe86463aa505d9564afa
Diffstat (limited to 'nokiav2/driver/pom.xml')
| -rw-r--r-- | nokiav2/driver/pom.xml | 73 |
1 files changed, 21 insertions, 52 deletions
diff --git a/nokiav2/driver/pom.xml b/nokiav2/driver/pom.xml index c7d438fd..8cd18011 100644 --- a/nokiav2/driver/pom.xml +++ b/nokiav2/driver/pom.xml @@ -47,17 +47,33 @@ <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-tomcat</artifactId> </exclusion> + <exclusion> + <groupId>com.fasterxml.jackson.core</groupId> + <artifactId>jackson-databind</artifactId> + </exclusion> </exclusions> </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-jetty</artifactId> <version>${spring.boot.version}</version> + <exclusions> + <exclusion> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-tomcat</artifactId> + </exclusion> + </exclusions> </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId> <version>${spring.boot.version}</version> + <exclusions> + <exclusion> + <groupId>org.springframework.boot</groupId> + <artifactId>spring-boot-starter-tomcat</artifactId> + </exclusion> + </exclusions> </dependency> <dependency> <groupId>org.springframework.boot</groupId> @@ -71,24 +87,17 @@ <version>24.0-jre</version> </dependency> <dependency> + <groupId>org.apache.httpcomponents</groupId> + <artifactId>httpclient</artifactId> + <version>4.5.5</version> + </dependency> + <dependency> <!-- parsing VNFDs --> <groupId>org.yaml</groupId> <artifactId>snakeyaml</artifactId> <version>1.19</version> </dependency> <dependency> - <!-- this version must be in sync with the dependency comming from spring boot --> - <groupId>com.fasterxml.jackson.dataformat</groupId> - <artifactId>jackson-dataformat-yaml</artifactId> - <version>2.9.4</version> - </dependency> - <dependency> - <!-- access MSB during registration --> - <groupId>org.onap.msb.java-sdk</groupId> - <artifactId>msb-java-sdk</artifactId> - <version>1.1.0</version> - </dependency> - <dependency> <groupId>pl.pojo</groupId> <artifactId>pojo-tester</artifactId> <version>0.7.6</version> @@ -100,46 +109,6 @@ <version>9.4.8.v20171121</version> <scope>test</scope> </dependency> - <dependency> - <groupId>org.onap.aai.aai-common</groupId> - <artifactId>aai-schema</artifactId> - <version>1.2.0</version> - <exclusions> - <!-- Can be removed if https://jira.onap.org/browse/AAI-894 is fixed --> - <exclusion> - <groupId>org.mockito</groupId> - <artifactId>mockito-core</artifactId> - </exclusion> - <exclusion> - <groupId>org.powermock</groupId> - <artifactId>powermock-module-junit4</artifactId> - </exclusion> - <exclusion> - <groupId>org.powermock</groupId> - <artifactId>powermock-api-mockito</artifactId> - </exclusion> - </exclusions> - </dependency> - <dependency> - <groupId>org.onap.aai</groupId> - <artifactId>rest-client</artifactId> - <version>1.2.0</version> - <exclusions> - <!-- Can be removed if https://jira.onap.org/browse/AAI-894 is fixed --> - <exclusion> - <groupId>org.mockito</groupId> - <artifactId>mockito-core</artifactId> - </exclusion> - <exclusion> - <groupId>org.powermock</groupId> - <artifactId>powermock-module-junit4</artifactId> - </exclusion> - <exclusion> - <groupId>org.powermock</groupId> - <artifactId>powermock-api-mockito</artifactId> - </exclusion> - </exclusions> - </dependency> </dependencies> <build> <plugins> |