From: Instrumental <jonathan.gathman@att.com>
Date: Mon, 17 Sep 2018 13:02:33 +0000 (-0500)
Subject: Remove Tomcat 2(Security Issue)
X-Git-Tag: 2.1.2~38
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F93%2F66993%2F1;p=aaf%2Fauthz.git

Remove Tomcat 2(Security Issue)

Issue-ID: AAF-420
Change-Id: Ibb080432f8c7faa7b923b1f4c1e4542d3ad0d693
Signed-off-by: Instrumental <jonathan.gathman@att.com>
---

diff --git a/cadi/servlet-sample/pom.xml b/cadi/servlet-sample/pom.xml
index de527c51..0da47f29 100644
--- a/cadi/servlet-sample/pom.xml
+++ b/cadi/servlet-sample/pom.xml
@@ -10,11 +10,6 @@
 	<name>CADI Servlet Sample (Test Only)</name>
 	<artifactId>aaf-cadi-servlet-sample</artifactId>
 	<packaging>jar</packaging>
-	<properties>
-		<!--  Jetty Version set by oParent -->
-		<tomcat.version>8.5.23</tomcat.version>
-	  </properties>
-
 	<dependencies>
 	 	<!-- needs to be first to avoid jar signer implications for servlet api  -->
 		<dependency>
@@ -23,39 +18,6 @@
 			<version>${project.jettyVersion}</version>
 		</dependency>
 
-	     <!-- Tomcat Embedded has security flaws.  not worth it for a sample
-  	     <dependency>
-	        <groupId>org.apache.tomcat.embed</groupId>
-	        <artifactId>tomcat-embed-jasper</artifactId>
-	        <version>${tomcat.version}</version>
-	     </dependency>
-             -->
-	     <dependency>
-	        <groupId>org.apache.tomcat.embed</groupId>
-	        <artifactId>tomcat-embed-core</artifactId>
-	        <version>${tomcat.version}</version>
-	    </dependency>
-	    <dependency>
-	        <groupId>org.apache.tomcat.embed</groupId>
-	        <artifactId>tomcat-embed-jasper</artifactId>
-	        <version>${tomcat.version}</version>
-	    </dependency>
-	    <dependency>
-	        <groupId>org.apache.tomcat</groupId>
-	        <artifactId>tomcat-jasper</artifactId>
-	        <version>${tomcat.version}</version>
-	    </dependency>
-	    <dependency>
-	        <groupId>org.apache.tomcat</groupId>
-	        <artifactId>tomcat-jasper-el</artifactId>
-	        <version>${tomcat.version}</version>
-	    </dependency>
-	    <dependency>
-	        <groupId>org.apache.tomcat</groupId>
-	        <artifactId>tomcat-jsp-api</artifactId>
-	        <version>${tomcat.version}</version>
-	    </dependency>
-
 		<dependency>
 			<groupId>org.onap.aaf.authz</groupId>
 			<artifactId>aaf-cadi-aaf</artifactId>