I think it's ok to add common collections, as this is probably used in a lot of applications and I prefer linking to jars to copy&pasting. Maybe you want to read [1] to make sure we don't add a serialization issue, when user don't use a current version of commons collection. I have to admit, that I haven't taken my time to fully understand, if this would affect us, maybe setting the map references as transient is enough ...
Andi. [1] http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/ -- View this message in context: http://apache-poi.1045710.n5.nabble.com/adding-external-dependencies-to-POI-tp5721402p5721403.html Sent from the POI - Dev mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
