[
https://issues.apache.org/jira/browse/JSPWIKI-276?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12639950#action_12639950
]
Harry Metske commented on JSPWIKI-276:
--------------------------------------
Yes, I think that's a good approach.
Although this issue is not a real bugfix, it still has some security related
things, so this together with the "size" of the patch, I think it would fit in
2.8.1 :
- remove jsonrpc-1.0.jar
- add jabsorb-1.3.jar, slf4j-api-1.5.3.jar, slf4j-log4j12-1.5.3.jar
- change package name of JSONRPC in web.xml
- small patches to Preferences.java , JSONRPCManager.java
> Use jabsorb instead of jsonrpc
> ------------------------------
>
> Key: JSPWIKI-276
> URL: https://issues.apache.org/jira/browse/JSPWIKI-276
> Project: JSPWiki
> Issue Type: Improvement
> Affects Versions: 2.6.2
> Reporter: Jorge Ferrer
> Assignee: Harry Metske
> Priority: Trivial
>
> jsonrpc seems to be unmaintained and jabsorb (http://jabsorb.org/) seems to
> be the new fork of that project. Migrating should to be quite simple.
> Besides the new features added to jabsorb, a very good reason to migrate is
> because this type library is sensitive to security related bugs so it's very
> desired to use one that is well maintained. Just in case.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
