PRODSEC-4483: replace simple-xml with simple-xml-safe

2026-09-16 18:12:56 +00:00 · 2022-01-14 09:57:02 +00:00
parent a6c51a6ceb e2755e79ca
commit 73cd9126ed
2 changed files with 14 additions and 1 deletions
@@ -82,6 +82,19 @@
            <artifactId>solr-clustering</artifactId>
            <version>${solr.version}</version>
            <scope>provided</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.simpleframework</groupId>
+                    <artifactId>simple-xml</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <!-- replace simple-xml from solr-clustering with simple-xml-safe -->
+        <dependency>
+            <groupId>com.carrotsearch.thirdparty</groupId>
+            <artifactId>simple-xml-safe</artifactId>
+            <version>2.7.1</version>
+            <scope>provided</scope>
        </dependency>

        <dependency>
@@ -248,7 +248,7 @@ poi-ooxml-schemas-3.17-beta1.jar
 poi-scratchpad-3.17-beta1.jar
 protobuf-java-3.1.0.jar
 rome-1.5.1.jar
-simple-xml-2.7.1.jar
+simple-xml-safe-2.7.1.jar
 slf4j-api-1.7.7.jar
 slf4j-log4j12-1.7.7.jar
 solr-analysis-extras-6.6.5-patched.6.jar