Skip to content

Commit 5dc43c6

Browse files
committed
Multiple pom changes:
1. Upgrade AntiSamy from 1.5.12 to 1.6.0. 2. Upgrade batik-css from 1.13 to 1.14 to address 2 CVEs. 3. Upgrade pcprov-jdk15on from 1.65 to 1.68 (test scope only; still problems with JDK 7). 4. Downgrade animal-sniffer-enforcer from 1.18 to 1.17 because of problems.
1 parent 6e0b032 commit 5dc43c6

File tree

1 file changed

+8
-11
lines changed

1 file changed

+8
-11
lines changed

pom.xml

Lines changed: 8 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -169,6 +169,9 @@
169169
<artifactId>xalan</artifactId>
170170
</exclusion>
171171
<exclusion>
172+
<!-- xom tries to pull this in, but a newer version is in Java 7 and later
173+
so we want to exclude this transitive dependency.
174+
-->
172175
<groupId>xerces</groupId>
173176
<artifactId>xercesImpl</artifactId>
174177
</exclusion>
@@ -238,7 +241,7 @@
238241
<dependency>
239242
<groupId>org.owasp.antisamy</groupId>
240243
<artifactId>antisamy</artifactId>
241-
<version>1.5.12</version>
244+
<version>1.6.0</version>
242245
</dependency>
243246
<dependency>
244247
<groupId>org.slf4j</groupId>
@@ -259,7 +262,7 @@
259262
<dependency>
260263
<groupId>org.apache.xmlgraphics</groupId>
261264
<artifactId>batik-css</artifactId>
262-
<version>1.13</version>
265+
<version>1.14</version>
263266
<exclusions>
264267
<exclusion>
265268
<groupId>commons-io</groupId>
@@ -282,11 +285,6 @@
282285
</exclusion>
283286
</exclusions>
284287
</dependency>
285-
<dependency>
286-
<groupId>xerces</groupId>
287-
<artifactId>xercesImpl</artifactId>
288-
<version>2.12.1</version>
289-
</dependency>
290288
<dependency>
291289
<groupId>xml-apis</groupId>
292290
<artifactId>xml-apis</artifactId>
@@ -317,8 +315,7 @@
317315
<dependency>
318316
<groupId>org.bouncycastle</groupId>
319317
<artifactId>bcprov-jdk15on</artifactId>
320-
<!-- Tried to update this to 1.67 but that resulted in error when running 'mvn site' -->
321-
<version>1.65.01</version>
318+
<version>1.68</version>
322319
<scope>test</scope>
323320
</dependency>
324321
<!-- https://mvnrepository.com/artifact/org.powermock/powermock-api-mockito -->
@@ -502,8 +499,8 @@
502499
<dependency>
503500
<groupId>org.codehaus.mojo</groupId>
504501
<artifactId>animal-sniffer-enforcer-rule</artifactId>
505-
<!-- Updating to 1.19 causes lots of errors in 'mvn site' so leaving at 1.18 for now. -->
506-
<version>1.18</version>
502+
<!-- Updating to 1.19 causes LOTS of errors in 'mvn site' and 1.18 requires Java 8 so leaving it at 1.17. -->
503+
<version>1.17</version>
507504
</dependency>
508505
</dependencies>
509506
<executions>

0 commit comments

Comments
 (0)