From 47c04b23cf7fe1ab24eee39e8d001dbe84c5fef3 Mon Sep 17 00:00:00 2001
From: vasraz <vasyl.razinkov@est.tech>
Date: Tue, 24 May 2022 09:12:03 +0100
Subject: [PATCH] Remove vulnerable dependency

Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech>
Change-Id: I7faf230b6cd65cafb07ed766a333f7857410db8a
Issue-ID: SDC-4017
---
 catalog-be/pom.xml | 4 ++++
 catalog-fe/pom.xml | 4 ++++
 pom.xml            | 2 +-
 3 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/catalog-be/pom.xml b/catalog-be/pom.xml
index 6595fef849..467b356c4b 100644
--- a/catalog-be/pom.xml
+++ b/catalog-be/pom.xml
@@ -637,6 +637,10 @@
                     <groupId>xerces</groupId>
                     <artifactId>xercesImpl</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>net.sourceforge.nekohtml</groupId>
+                    <artifactId>nekohtml</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
diff --git a/catalog-fe/pom.xml b/catalog-fe/pom.xml
index 4c709519ee..8d095f27ff 100644
--- a/catalog-fe/pom.xml
+++ b/catalog-fe/pom.xml
@@ -316,6 +316,10 @@
                     <groupId>xerces</groupId>
                     <artifactId>xercesImpl</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>net.sourceforge.nekohtml</groupId>
+                    <artifactId>nekohtml</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>
diff --git a/pom.xml b/pom.xml
index dc381c4ca9..5749fff805 100644
--- a/pom.xml
+++ b/pom.xml
@@ -78,7 +78,7 @@ Modifications copyright (c) 2018-2019 Nokia
         <jetty-distribution.version>9.4.45.v20220203</jetty-distribution.version>
         <cxf.version>3.4.4</cxf.version>
 
-        <org.owasp.esapi.version>2.2.3.1</org.owasp.esapi.version>
+        <org.owasp.esapi.version>2.4.0.0</org.owasp.esapi.version>
         <org.dom4j.version>2.1.3</org.dom4j.version>
 
         <!-- JSON and YAML Parsing -->
-- 
2.16.6