Description
dom4j is used in exactly one file in Solr, and it's a test: AddBlockUpdateTest
It seems like overkill to bloat the distro with that jar for one test, can we change the test to use something else and remove dom4j from our distro?
IDK whether there are transitive dependencies though.
Attachments
Attachments
Issue Links
- depends upon
-
SOLR-13335 Upgrade to velocity 2.0 and velocity-tools 3.0
- Closed
- relates to
-
SOLR-13208 Update dom4j in solr package due to security vulnerability
- Resolved
- links to