Fix bugs reported by sonar/nexus-iq

Rollback fixes for Nexus-iq, it does not help

Issue-ID: CLAMP-841
Signed-off-by: sebdet <sebastien.determe@intl.att.com>
Change-Id: I280c4cf612298d1cda64b8ed39a0a416f936fdc4

diff --git a/pom.xml b/pom.xml
index 99123dd..55448a0 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -77,7 +77,7 @@
 
                <eelf.core.version>1.0.0</eelf.core.version>
                <camel.version>2.25.0</camel.version>
-               <springboot.version>2.2.5.RELEASE</springboot.version>
+               <springboot.version>2.2.6.RELEASE</springboot.version>
 
                <sonar.java.coveragePlugin>jacoco</sonar.java.coveragePlugin>
                <sonar.surefire.reportsPath>${project.build.directory}/surefire-reports</sonar.surefire.reportsPath>
@@ -390,10 +390,6 @@
                                        <groupId>org.springframework.boot</groupId>
                                        <artifactId>spring-boot-starter-json</artifactId>
                                </exclusion>
-                               <exclusion>
-                                       <groupId>org.springframework</groupId>
-                                       <artifactId>spring-web</artifactId>
-                               </exclusion>
                        </exclusions>
                </dependency>
                <dependency>
@@ -506,6 +502,11 @@
                        <version>1.3</version>
                </dependency>
                <!-- Other dependencies to fix nexus IQ reported vulnerabilities -->
+               <dependency>
+                       <groupId>org.springframework.security</groupId>
+                       <artifactId>spring-security-web</artifactId>
+                       <version>5.2.3.RELEASE</version>
+               </dependency>
                <dependency>
                        <groupId>org.codehaus.plexus</groupId>
                        <artifactId>plexus-utils</artifactId>