ban log4j and javax.servlet dependencies (#611)

NationalSecurityAgency · Oct 11, 2023 · 048495b · 048495b
1 parent 7074308
commit 048495b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -770,6 +770,15 @@
               </goals>
               <configuration>
                 <rules>
+                  <bannedDependencies>
+                    <excludes>
+                      <exclude>ch.qos.logback:*:(,1.2.9)</exclude>
+                      <exclude>log4j</exclude>
+                      <exclude>org.apache.logging.log4j:*:(,2.17.1)</exclude>
+                      <exclude>javax.servlet</exclude>
+                    </excludes>
+                    <searchTransitive>true</searchTransitive>
+                  </bannedDependencies>
                   <requireMavenVersion>
                     <version>[${maven.min-version},)</version>
                   </requireMavenVersion>