[KNOX-2221] Upgrade shiro to 1.5.3

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.0
• Assignee: Kevin Risden
• Reporter: Kevin Risden
• Created: 01/Feb/20 20:21
• Updated: 13/Jul/20 14:33
• Resolved: 13/Jul/20 14:33

Description

Note: Can't upgrade to shiro 1.5.0 due to a bug in handling `/` only from SHIRO-682. Will need to wait for a new version of Shiro to upgrade.

Upgrade shiro 1.4.2 to 1.5.3

Shiro 1.5.0 release notes: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&version=12344991

Issue Links

• relates to: SHIRO-530 INI parser does not properly handled backslashes at end of values
• relates to: SHIRO-682 fix the potential threat when use "uri = uri + '/' " to bypassed shiro protect
• relates to: SHIRO-684 INI parser keeps escape characters in keys and values
• links to: GitHub Pull Request #271
• links to: GitHub Pull Request #360