[jira] [Updated] (SLING-7506) org.apache.sling.scripting.jsp.taglib: update esapi dependency

2018-02-19 Thread Julian Reschke (JIRA) 

 [ 
https://issues.apache.org/jira/browse/SLING-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated SLING-7506:
--
Component/s: Scripting

> org.apache.sling.scripting.jsp.taglib: update esapi dependency
> --
>
> Key: SLING-7506
> URL: https://issues.apache.org/jira/browse/SLING-7506
> Project: Sling
>  Issue Type: Task
>  Components: Scripting
>Reporter: Julian Reschke
>Priority: Major
>




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Updated] (SLING-7506) org.apache.sling.scripting.jsp.taglib: update esapi dependency

2018-02-19 Thread Julian Reschke (JIRA) 

 [ 
https://issues.apache.org/jira/browse/SLING-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Julian Reschke updated SLING-7506:
--
Description: 
To 

  https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1

due to the current transitive dep on

  https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3

which has several CVEs reported against..



> org.apache.sling.scripting.jsp.taglib: update esapi dependency
> --
>
> Key: SLING-7506
> URL: https://issues.apache.org/jira/browse/SLING-7506
> Project: Sling
>  Issue Type: Task
>  Components: Scripting
>Reporter: Julian Reschke
>Priority: Major
>
> To 
>   https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1
> due to the current transitive dep on
>   https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3
> which has several CVEs reported against..



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)