From c2ddcfb58bf0643b06570ea6d9a926c782edca71 Mon Sep 17 00:00:00 2001
From: Kailun Qin <kailun.qin@intel.com>
Date: Sat, 15 Sep 2018 17:26:02 +0800
Subject: Override dom4j to 2.1.1 due to security issue

Exclude dom4j used in dropwizard-hibernate and use the latest version
from org.dom4j instead.

Change-Id: I2be4f5cad7f5853e331634e9006b592166621d19
Issue-ID: VNFSDK-302
Signed-off-by: Kailun Qin <kailun.qin@intel.com>
---
 vnf-sdk-function-test/pom.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/vnf-sdk-function-test/pom.xml b/vnf-sdk-function-test/pom.xml
index 7abea6a..ef2db8e 100644
--- a/vnf-sdk-function-test/pom.xml
+++ b/vnf-sdk-function-test/pom.xml
@@ -141,6 +141,18 @@
             <groupId>io.dropwizard</groupId>
             <artifactId>dropwizard-hibernate</artifactId>
             <version>1.3.5</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>dom4j</groupId>
+                    <artifactId>dom4j</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <!-- https://mvnrepository.com/artifact/org.dom4j/dom4j -->
+        <dependency>
+            <groupId>org.dom4j</groupId>
+            <artifactId>dom4j</artifactId>
+            <version>2.1.1</version>
         </dependency>
         <!-- lombok -->
         <dependency>
-- 
cgit 1.2.3-korg