[ https://issues.apache.org/jira/browse/HADOOP-12711?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15157717#comment-15157717 ]
Wei-Chiu Chuang commented on HADOOP-12711: ------------------------------------------ I'm still working on it. The issue is there's no good equivalent of URIUtil.encodeWithinPath(), which is used to implement ServiceUtil.encodeQueryValue(). But I have a plan which can use URIBuilder() to achieve the same thing, and remove ServiceUtil.encodeQueryValue() entirely. I should be able to post a patch soon. > Remove dependency on commons-httpclient for ServletUtil > ------------------------------------------------------- > > Key: HADOOP-12711 > URL: https://issues.apache.org/jira/browse/HADOOP-12711 > Project: Hadoop Common > Issue Type: Sub-task > Affects Versions: 2.8.0 > Reporter: Wei-Chiu Chuang > Assignee: Wei-Chiu Chuang > Attachments: HADOOP-12711.001.patch > > > This is a branch-2 only change, as ServletUtil for trunk removes the code > that depends on commons-httpclient. > We need to retire the use of commons-httpclient in Hadoop to address the > security concern in CVE-2012-5783 > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5783. > {noformat} > import org.apache.commons.httpclient.URIException; > import org.apache.commons.httpclient.util.URIUtil; > {noformat} -- This message was sent by Atlassian JIRA (v6.3.4#6332)