summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKailun Qin <kailun.qin@intel.com>2018-09-15 17:26:02 +0800
committerKailun Qin <kailun.qin@intel.com>2018-09-15 17:33:42 +0800
commitc2ddcfb58bf0643b06570ea6d9a926c782edca71 (patch)
tree90ee8d617672d9c4370e81d3c825faef2d075927
parent8c6e31f75f82db7d9e685b62b41521a8992fa3de (diff)
Override dom4j to 2.1.1 due to security issue
Exclude dom4j used in dropwizard-hibernate and use the latest version from org.dom4j instead. Change-Id: I2be4f5cad7f5853e331634e9006b592166621d19 Issue-ID: VNFSDK-302 Signed-off-by: Kailun Qin <kailun.qin@intel.com>
-rw-r--r--vnf-sdk-function-test/pom.xml12
1 files changed, 12 insertions, 0 deletions
diff --git a/vnf-sdk-function-test/pom.xml b/vnf-sdk-function-test/pom.xml
index 7abea6a..ef2db8e 100644
--- a/vnf-sdk-function-test/pom.xml
+++ b/vnf-sdk-function-test/pom.xml
@@ -141,6 +141,18 @@
<groupId>io.dropwizard</groupId>
<artifactId>dropwizard-hibernate</artifactId>
<version>1.3.5</version>
+ <exclusions>
+ <exclusion>
+ <groupId>dom4j</groupId>
+ <artifactId>dom4j</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <!-- https://mvnrepository.com/artifact/org.dom4j/dom4j -->
+ <dependency>
+ <groupId>org.dom4j</groupId>
+ <artifactId>dom4j</artifactId>
+ <version>2.1.1</version>
</dependency>
<!-- lombok -->
<dependency>