From: Michael Reece <michaere@amdocs.com>
Date: Wed, 19 Sep 2018 10:52:59 +0000 (+0100)
Subject: Fix NexusIQ security vunerabilities
X-Git-Tag: 1.3.0~3
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F79%2F67679%2F1;p=aai%2Fchamp.git

Fix NexusIQ security vunerabilities

Additional fixes to exclude dom4j and commons-httpclient dependencies

Issue-ID: AAI-1614

Change-Id: Ic9b450140899069f66c30f320cba3b853c1013db
Signed-off-by: Michael Reece <michaere@amdocs.com>
---

diff --git a/champ-lib/champ-core/pom.xml b/champ-lib/champ-core/pom.xml
index 38318b0..c64b0df 100644
--- a/champ-lib/champ-core/pom.xml
+++ b/champ-lib/champ-core/pom.xml
@@ -118,6 +118,10 @@ limitations under the License.
                     <groupId>commons-httpclient</groupId>
                     <artifactId>commons-compress</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-httpclient</groupId>
+                    <artifactId>commons-httpclient</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 
diff --git a/champ-lib/champ-janus/pom.xml b/champ-lib/champ-janus/pom.xml
index 10f0d99..f17de33 100644
--- a/champ-lib/champ-janus/pom.xml
+++ b/champ-lib/champ-janus/pom.xml
@@ -80,6 +80,10 @@ limitations under the License.
                     <groupId>org.apache.tinkerpop</groupId>
                     <artifactId>gremlin-groovy</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>dom4j</groupId>
+                    <artifactId>dom4j</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 
diff --git a/champ-lib/champ-titan/pom.xml b/champ-lib/champ-titan/pom.xml
index e83ff7c..4942156 100644
--- a/champ-lib/champ-titan/pom.xml
+++ b/champ-lib/champ-titan/pom.xml
@@ -91,6 +91,10 @@ limitations under the License.
                     <groupId>org.mindrot</groupId>
                     <artifactId>jbcrypt</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>dom4j</groupId>
+                    <artifactId>dom4j</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 
diff --git a/champ-service/pom.xml b/champ-service/pom.xml
index 6a31fb4..cbd54f6 100644
--- a/champ-service/pom.xml
+++ b/champ-service/pom.xml
@@ -94,13 +94,6 @@ limitations under the License.
             <artifactId>spring-boot-starter-jersey</artifactId>
         </dependency>
 
-        <dependency>
-            <groupId>dom4j</groupId>
-            <artifactId>dom4j</artifactId>
-            <version>1.6.1</version>
-            <scope>provided</scope>
-        </dependency>
-
         <dependency>
             <groupId>org.json</groupId>
             <artifactId>json</artifactId>