From: guochuyicmri <guochuyi@chinamobile.com>
Date: Thu, 16 May 2019 11:44:28 +0000 (+0800)
Subject: Fix usecase-ui security risks
X-Git-Tag: 2.0.1~19
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=ebdcdab7b4e84068814c01241d4bb847fca66b5a;p=usecase-ui%2Fserver.git

Fix usecase-ui security risks

Change-Id: Iba150e755d60c181caa20b8b1ef721a19ca97631
Issue-ID: USECASEUI-258
Signed-off-by: guochuyicmri <guochuyi@chinamobile.com>
---

diff --git a/pom.xml b/pom.xml
index 39d5a5b7..3921d55a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -41,21 +41,6 @@
         <siteNexusPath>content/sites/site/${project.groupId}/${project.artifactId}/${project.version}/</siteNexusPath>
     </properties>
 
-    <distributionManagement>
-        <repository>
-            <id>onap-releases</id>
-            <url>${nexusproxy}/${releaseNexusPath}</url>
-        </repository>
-        <snapshotRepository>
-            <id>onap-snapshots</id>
-            <url>${nexusproxy}/${snapshotNexusPath}</url>
-        </snapshotRepository>
-        <site>
-            <id>onap-site</id>
-            <url>dav:${nexusproxy}${siteNexusPath}</url>
-        </site>
-    </distributionManagement>
-
     <!-- Specify the repositories here to avoid coordination of ~/.m2/settings.xml 
         files among developers. Use values (not properties) so oparent can be resolved. -->
     <repositories>
diff --git a/server/pom.xml b/server/pom.xml
index 1e062d07..e597dbf1 100644
--- a/server/pom.xml
+++ b/server/pom.xml
@@ -95,6 +95,7 @@
         <dependency>
             <groupId>org.springframework.data</groupId>
             <artifactId>spring-data-rest-hal-browser</artifactId>
+            <version>2.6.21.RELEASE</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
@@ -157,6 +158,11 @@
         </dependency>
 
         <!-- security vulnerabilities -->
+        <dependency>
+            <groupId>org.apache.tomcat.embed</groupId>
+            <artifactId>tomcat-embed-websocket</artifactId>
+            <version>8.5.32</version>
+        </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
@@ -285,12 +291,6 @@
             <version>1.1.1</version>
         </dependency>
 
-        <dependency>
-            <groupId>com.google.guava</groupId>
-            <artifactId>guava</artifactId>
-            <version>23.0</version>
-        </dependency>
-
         <dependency>
             <groupId>org.onap.msb.java-sdk</groupId>
             <artifactId>msb-java-sdk</artifactId>