[SLING-7506] org.apache.sling.scripting.jsp.taglib: update esapi dependency

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: Scripting
• Assignee: Dan Klco
• Reporter: Julian Reschke
• Created: 19/Feb/18 16:11
• Updated: 02/May/18 21:31
• Resolved: 02/May/18 21:31

Description

To

https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1

due to the current transitive dep on

https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3

which has several CVEs reported against..