[PIG-5302] Remove HttpClient dependency

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.18.0
• Assignee: Nándor Kollár
• Reporter: Nándor Kollár
• Created: 14/Sep/17 07:54
• Updated: 14/Nov/17 12:52
• Resolved: 14/Nov/17 08:54

Description

Pig depends on Apache Commons HttpClient 3.1 which is an old version with security problems (CVE-2015-5262)

Also, Pig depends on Apache HttpComponents (it also needs update to newer version due to similar reason), which is the successor of HttpClient, thus we should remove HttpClient dependency, and update HttpComponents to 4.4+