Fix CLM security issues

Change-Id: Iccef61ae8921422ac840cfa0dd927a94010f7571
Signed-off-by: Prudence Au <prudence.au@amdocs.com>
Issue-ID: AAI-1728
Issue-ID: AAI-1727
Issue-ID: AAI-1729
Issue-ID: AAI-1731

diff --git a/pom.xml b/pom.xml
index 7aa85a5..58948a6 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -85,7 +85,7 @@ limitations under the License.
     </dependency>
     <dependency>
           <groupId>ch.qos.logback</groupId>
-          <artifactId>logback-core</artifactId>
+          <artifactId>logback-classic</artifactId>
           <version>1.2.3</version>
       </dependency>
     <dependency>
@@ -112,8 +112,9 @@ limitations under the License.
       <artifactId>commons-collections</artifactId>
     </dependency>
     <dependency>
-      <groupId>dom4j</groupId>
+      <groupId>org.dom4j</groupId>
       <artifactId>dom4j</artifactId>
+      <version>2.1.1</version>
     </dependency>
         <dependency>
             <groupId>org.eclipse.jetty</groupId>
@@ -300,37 +301,6 @@ limitations under the License.
         </executions>
       </plugin>
 
-      <!-- - REST API documentation is generated as Swagger JSON files using a doclet. - See also: https://github.com/conorroche/swagger-doclet -->
-      <plugin>
-        <groupId>org.apache.maven.plugins</groupId>
-        <artifactId>maven-javadoc-plugin</artifactId>
-        <version>2.10.4</version>
-        <executions>
-          <execution>
-            <id>attach-javadocs</id>
-            <phase>generate-resources</phase>
-            <configuration>
-              <doclet>com.tenxerconsulting.swagger.doclet.ServiceDoclet</doclet>
-              <docletArtifact>
-                <groupId>com.tenxerconsulting</groupId>
-                <artifactId>swagger-doclet</artifactId>
-                <version>1.1.3</version>
-              </docletArtifact>
-              <classifier>apidocs</classifier>
-              <outputDirectory>${project.build.directory}/../staticContent</outputDirectory>
-              <useStandardDocletOptions>false</useStandardDocletOptions>
-              <additionalparam>-apiVersion 1 -docBasePath
-                http://localhost:${serverPort}/services/validation-service/v1/static
-                -apiBasePath
-                http://localhost:${serverPort}</additionalparam>
-            </configuration>
-            <goals>
-              <goal>jar</goal>
-            </goals>
-          </execution>
-        </executions>
-      </plugin>
-
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-surefire-plugin</artifactId>