Exclude jackson-databind

we are not using this code yet, but let's remove
jackson-databind. The inclusion of drools-pdp adds
in the latest jackson-databind.

Issue-ID: POLICY-504
Change-Id: I73a1939eb3827a7ef06c40e11764944b3d80685b
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>

diff --git a/controlloop/common/msb/pom.xml b/controlloop/common/msb/pom.xml
index 02dc3b5..329a84a 100644 (file)
--- a/controlloop/common/msb/pom.xml
+++ b/controlloop/common/msb/pom.xml
@@ -13,10 +13,20 @@
   <artifactId>msb</artifactId>
 
   <dependencies>
+       <!--
+       CLM security issue force use of databind 2.9.5
+       from msb 
+        -->
     <dependency>
       <groupId>org.onap.msb.java-sdk</groupId>
       <artifactId>msb-java-sdk</artifactId>
       <version>1.1.0</version>
+      <exclusions>
+       <exclusion>
+               <groupId>com.fasterxml.jackson.core</groupId>
+               <artifactId>jackson-databind</artifactId>
+       </exclusion>
+      </exclusions>
     </dependency>
     <dependency>
       <groupId>junit</groupId>