tree 004a44f76d4142df58fffaeccb0514d2e667a99a
parent be0ded7f357c2535d497cddfb39623801aacd89e
author Pamela Dragosh <pdragosh@research.att.com> 1524148689 +0000
committer Gerrit Code Review <gerrit@onap.org> 1524148689 +0000

Updated git submodules

Project: policy/engine master 19f797e3d37c5fde0da8d58208e1256be9376e82

Merge "Remove insecure dependency on PolicyEngineAPI"

Remove insecure dependency on PolicyEngineAPI

The insecure dependency tyrus-container-grizzly-client is
part of Tyrus, a Java web socket implementation library.

A direct substitution of this library is not available so
the code in AutoClientEnd.java and ManualClientEnd.java
was adapted to work with the library
org.java-websocket.Java-WebSocket
that does not seem to have any vulnerabilities when tested
with the org.owasp.dependency-check-maven plugin.

The purpose of this submission is to see if the new library
does indeed remove the vulnerability. If so, the implementation
in AutoClientEnd and ManualClientEnd must be cleaned up.

Change-Id: I961635aaea42c2f847edf11ee77e2961cdfb097b
Issue-ID: POLICY-744
Signed-off-by: liamfallon <liam.fallon@ericsson.com>