[jboss-jira] [JBoss JIRA] (WFCORE-4271) Exclude Servlet 3.1 transitive dependency from JACC API dependency

Darran Lofthouse (Jira) issues at jboss.org
Wed Jan 16 10:51:08 EST 2019


     [ https://issues.jboss.org/browse/WFCORE-4271?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated WFCORE-4271:
-------------------------------------
    Fix Version/s: 8.0.0.Beta3


> Exclude Servlet 3.1 transitive dependency from JACC API dependency
> ------------------------------------------------------------------
>
>                 Key: WFCORE-4271
>                 URL: https://issues.jboss.org/browse/WFCORE-4271
>             Project: WildFly Core
>          Issue Type: Task
>          Components: Security
>    Affects Versions: 8.0.0.Beta2
>            Reporter: Jan Blizňák
>            Assignee: Jan Blizňák
>            Priority: Major
>             Fix For: 8.0.0.Beta3
>
>
> As a follow-up to WFLY-11573 we could exclude transitive Servlet 3.1 dependency in wildfly-core project from jboss-jacc-api_1.5_spec dependency.
> While jboss-jacc-api_1.5_spec depends on jboss-servlet-api-3.1-spec and we are trying to remove the depedency without providing another one, this still should be correct:
> 1) testsuite passes with the exclusion in place, ie. the classes from Servlet 3.1 aren't used here 
> 2) both feature and galleon pack excludes it too 
> https://github.com/wildfly/wildfly-core/blob/master/core-feature-pack/pom.xml#L117-L126
> https://github.com/wildfly/wildfly-core/blob/master/core-galleon-pack/pom.xml#L120-L129
> 3) the module contains it as optional dependency
> https://github.com/wildfly/wildfly-core/blob/master/core-feature-pack/src/main/resources/modules/system/layers/base/javax/security/jacc/api/main/module.xml#L27



--
This message was sent by Atlassian Jira
(v7.12.1#712002)



More information about the jboss-jira mailing list