Fix NexusIQ security vunerabilities

Additional fixes to exclude dom4j and commons-httpclient dependencies

Issue-ID: AAI-1614

Change-Id: Ic9b450140899069f66c30f320cba3b853c1013db
Signed-off-by: Michael Reece <michaere@amdocs.com>

diff --git a/champ-lib/champ-core/pom.xml b/champ-lib/champ-core/pom.xml
index 38318b0..c64b0df 100644 (file)
--- a/champ-lib/champ-core/pom.xml
+++ b/champ-lib/champ-core/pom.xml
@@ -118,6 +118,10 @@ limitations under the License.
                     <groupId>commons-httpclient</groupId>
                     <artifactId>commons-compress</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-httpclient</groupId>
+                    <artifactId>commons-httpclient</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 

diff --git a/champ-lib/champ-janus/pom.xml b/champ-lib/champ-janus/pom.xml
index 10f0d99..f17de33 100644 (file)
--- a/champ-lib/champ-janus/pom.xml
+++ b/champ-lib/champ-janus/pom.xml
@@ -80,6 +80,10 @@ limitations under the License.
                     <groupId>org.apache.tinkerpop</groupId>
                     <artifactId>gremlin-groovy</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>dom4j</groupId>
+                    <artifactId>dom4j</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 

diff --git a/champ-lib/champ-titan/pom.xml b/champ-lib/champ-titan/pom.xml
index e83ff7c..4942156 100644 (file)
--- a/champ-lib/champ-titan/pom.xml
+++ b/champ-lib/champ-titan/pom.xml
@@ -91,6 +91,10 @@ limitations under the License.
                     <groupId>org.mindrot</groupId>
                     <artifactId>jbcrypt</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>dom4j</groupId>
+                    <artifactId>dom4j</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 

diff --git a/champ-service/pom.xml b/champ-service/pom.xml
index 6a31fb4..cbd54f6 100644 (file)
--- a/champ-service/pom.xml
+++ b/champ-service/pom.xml
@@ -94,13 +94,6 @@ limitations under the License.
             <artifactId>spring-boot-starter-jersey</artifactId>
         </dependency>
 
-        <dependency>
-            <groupId>dom4j</groupId>
-            <artifactId>dom4j</artifactId>
-            <version>1.6.1</version>
-            <scope>provided</scope>
-        </dependency>
-
         <dependency>
             <groupId>org.json</groupId>
             <artifactId>json</artifactId>