From b96fc12cbd4d383df128de7504c9e167a122ab1b Mon Sep 17 00:00:00 2001
From: MichaelMorris <michael.morris@est.tech>
Date: Mon, 7 Mar 2022 18:54:12 +0000
Subject: [PATCH] Update esapi dependency for sec vulnerability

Signed-off-by: MichaelMorris <michael.morris@est.tech>
Issue-ID: SDC-3895
Change-Id: I457f6865f081faf9474e2f63006b339b7c1512ea
---
 catalog-be/src/main/resources/ESAPI.properties | 4 +++-
 catalog-fe/src/main/resources/ESAPI.properties | 4 +++-
 pom.xml                                        | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/catalog-be/src/main/resources/ESAPI.properties b/catalog-be/src/main/resources/ESAPI.properties
index a1fcdcdece..daf4261529 100644
--- a/catalog-be/src/main/resources/ESAPI.properties
+++ b/catalog-be/src/main/resources/ESAPI.properties
@@ -356,6 +356,8 @@ Logger.LogServerIP=true
 Logger.LogFileName=ESAPI_logging_file
 # MaxLogFileSize, the max size (in bytes) of a single log file before it cuts over to a new one (default is 10,000,000)
 Logger.MaxLogFileSize=10000000
+Logger.UserInfo=false
+Logger.ClientInfo=false
 
 
 #===========================================================================
@@ -449,4 +451,4 @@ Validator.DirectoryName=^[a-zA-Z0-9:/\\\\!@#$%^&{}\\[\\]()_+\\-=,.~'` ]{1,255}$
 
 # Validation of dates. Controls whether or not 'lenient' dates are accepted.
 # See DataFormat.setLenient(boolean flag) for further details.
-Validator.AcceptLenientDates=false
\ No newline at end of file
+Validator.AcceptLenientDates=false
diff --git a/catalog-fe/src/main/resources/ESAPI.properties b/catalog-fe/src/main/resources/ESAPI.properties
index a1fcdcdece..daf4261529 100644
--- a/catalog-fe/src/main/resources/ESAPI.properties
+++ b/catalog-fe/src/main/resources/ESAPI.properties
@@ -356,6 +356,8 @@ Logger.LogServerIP=true
 Logger.LogFileName=ESAPI_logging_file
 # MaxLogFileSize, the max size (in bytes) of a single log file before it cuts over to a new one (default is 10,000,000)
 Logger.MaxLogFileSize=10000000
+Logger.UserInfo=false
+Logger.ClientInfo=false
 
 
 #===========================================================================
@@ -449,4 +451,4 @@ Validator.DirectoryName=^[a-zA-Z0-9:/\\\\!@#$%^&{}\\[\\]()_+\\-=,.~'` ]{1,255}$
 
 # Validation of dates. Controls whether or not 'lenient' dates are accepted.
 # See DataFormat.setLenient(boolean flag) for further details.
-Validator.AcceptLenientDates=false
\ No newline at end of file
+Validator.AcceptLenientDates=false
diff --git a/pom.xml b/pom.xml
index 72d407de72..f736c4fb64 100644
--- a/pom.xml
+++ b/pom.xml
@@ -78,7 +78,7 @@ Modifications copyright (c) 2018-2019 Nokia
         <jetty-distribution.version>9.4.45.v20220203</jetty-distribution.version>
         <cxf.version>3.4.4</cxf.version>
 
-        <org.owasp.esapi.version>2.2.0.0</org.owasp.esapi.version>
+        <org.owasp.esapi.version>2.2.3.1</org.owasp.esapi.version>
         <org.dom4j.version>2.1.3</org.dom4j.version>
 
         <!-- JSON and YAML Parsing -->
-- 
2.16.6