From: Pamela Dragosh <pdragosh@research.att.com>
Date: Thu, 29 Mar 2018 00:25:35 +0000 (-0700)
Subject: Exclude jackson-databind
X-Git-Tag: v1.2.0~3
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=38569b3dfa7859c8aab864e1c80008404a3cad69;p=policy%2Fdrools-applications.git

Exclude jackson-databind

we are not using this code yet, but let's remove
jackson-databind. The inclusion of drools-pdp adds
in the latest jackson-databind.

Issue-ID: POLICY-504
Change-Id: I73a1939eb3827a7ef06c40e11764944b3d80685b
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
---

diff --git a/controlloop/common/msb/pom.xml b/controlloop/common/msb/pom.xml
index 02dc3b5a6..329a84ab2 100644
--- a/controlloop/common/msb/pom.xml
+++ b/controlloop/common/msb/pom.xml
@@ -13,10 +13,20 @@
   <artifactId>msb</artifactId>
 
   <dependencies>
+  	<!--
+  	CLM security issue force use of databind 2.9.5
+  	from msb 
+  	 -->
     <dependency>
       <groupId>org.onap.msb.java-sdk</groupId>
       <artifactId>msb-java-sdk</artifactId>
       <version>1.1.0</version>
+      <exclusions>
+      	<exclusion>
+      		<groupId>com.fasterxml.jackson.core</groupId>
+      		<artifactId>jackson-databind</artifactId>
+      	</exclusion>
+      </exclusions>
     </dependency>
     <dependency>
       <groupId>junit</groupId>