Code Review / policy / apex-pdp.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 9c0c0c8) | patch
Remove apex-pdp Jackson security issue 91/109391/2
authorliamfallon <liam.fallon@est.tech>
Sun, 21 Jun 2020 20:52:55 +0000 (21:52 +0100)
committerliamfallon <liam.fallon@est.tech>
Tue, 23 Jun 2020 12:12:00 +0000 (13:12 +0100)
commitff86f98e38f3df388ff3dfa3b3bd995707d05b9b
tree0a4cb6bd70b4ef327402ba407c491aef763b5e00tree | snapshot
parent9c0c0c8f61a08aec5c95ebb90647a0aae445e129commit | diff
Remove apex-pdp Jackson security issue

We should use the managed version of jackson from policy-parent rather
than a specific apex-pdp version.

Also upgrade the version of Avro, avro 1.9.2 uses a newer somewhat more
secure version of Jackson.

Issue-ID: POLICY-1508
Change-Id: If32218816ae76cf3cf6ddc8980e3a37e7e2ffd19
Signed-off-by: liamfallon <liam.fallon@est.tech>
core/core-infrastructure/src/main/java/org/onap/policy/apex/core/infrastructure/messaging/impl/ws/client/MessagingClient.java diff | blob | history
plugins/plugins-context/plugins-context-schema/plugins-context-schema-avro/pom.xml diff | blob | history
pom.xml diff | blob | history
tools/tools-common/pom.xml diff | blob | history
This repo will hold the next generation Apex PDP engine (Casablanca)