| <?xml version="1.0" encoding="UTF-8"?> |
| <!-- |
| |
| Licensed to the Apache Software Foundation (ASF) under one or more |
| contributor license agreements. See the NOTICE file distributed with |
| this work for additional information regarding copyright ownership. |
| The ASF licenses this file to You under the Apache License, Version 2.0 |
| (the "License"); you may not use this file except in compliance with |
| the License. You may obtain a copy of the License at |
| |
| http://www.apache.org/licenses/LICENSE-2.0 |
| |
| Unless required by applicable law or agreed to in writing, software |
| distributed under the License is distributed on an "AS IS" BASIS, |
| WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| See the License for the specific language governing permissions and |
| limitations under the License. |
| --> |
| |
| <!-- $Rev$ $Date$ --> |
| |
| <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> |
| <parent> |
| <artifactId>server</artifactId> |
| <groupId>org.apache.tomee</groupId> |
| <version>8.0.15</version> |
| </parent> |
| |
| <modelVersion>4.0.0</modelVersion> |
| <artifactId>openejb-cxf</artifactId> |
| <packaging>jar</packaging> |
| <name>TomEE :: Server :: CXF</name> |
| |
| <properties> |
| <tomee.build.name>${project.groupId}.server.cxf</tomee.build.name> |
| <openejb.osgi.import.pkg> |
| org.apache.xml.resolver*;resolution:=optional, |
| * |
| </openejb.osgi.import.pkg> |
| </properties> |
| |
| <dependencies> |
| <dependency> |
| <groupId>junit</groupId> |
| <artifactId>junit</artifactId> |
| <scope>test</scope> |
| </dependency> |
| <dependency> |
| <groupId>${project.groupId}</groupId> |
| <artifactId>openejb-webservices</artifactId> |
| <version>${project.version}</version> |
| </dependency> |
| <dependency> |
| <groupId>${project.groupId}</groupId> |
| <artifactId>openejb-cxf-transport</artifactId> |
| <version>${project.version}</version> |
| </dependency> |
| <dependency> |
| <groupId>wsdl4j</groupId> |
| <artifactId>wsdl4j</artifactId> |
| </dependency> |
| <!-- override woodstox to mitigate woodstox CVE-2022-40152 --> |
| <dependency> |
| <groupId>com.fasterxml.woodstox</groupId> |
| <artifactId>woodstox-core</artifactId> |
| <version>${version.woodstox}</version> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.santuario</groupId> |
| <artifactId>xmlsec</artifactId> |
| <version>${version.xmlsec}</version> |
| <exclusions> |
| <exclusion> |
| <groupId>com.fasterxml.woodstox</groupId> |
| <artifactId>woodstox-core</artifactId> |
| </exclusion> |
| </exclusions> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.wss4j</groupId> |
| <artifactId>wss4j-ws-security-dom</artifactId> |
| <version>${version.wss4j}</version> |
| <exclusions> |
| <exclusion> |
| <groupId>org.apache.santuario</groupId> |
| <artifactId>xmlsec</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>org.apache.geronimo.specs</groupId> |
| <artifactId>*</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>org.apache.geronimo.javamail</groupId> |
| <artifactId>geronimo-javamail_1.4_mail</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>net.sf.ehcache</groupId> |
| <artifactId>*</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>org.ehcache</groupId> |
| <artifactId>*</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>com.google.guava</groupId> |
| <artifactId>guava</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>org.codehaus.woodstox</groupId> |
| <artifactId>woodstox-core-asl</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>io.dropwizard.metrics</groupId> |
| <artifactId>metrics-core</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>jakarta.activation</groupId> |
| <artifactId>jakarta.activation-api</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>jakarta.xml.ws</groupId> |
| <artifactId>jakarta.xml.ws-api</artifactId> |
| </exclusion> |
| </exclusions> |
| </dependency> |
| <!-- Override the bcprov from the previous artifact --> |
| <dependency> |
| <groupId>org.bouncycastle</groupId> |
| <artifactId>bcprov-jdk15on</artifactId> |
| <version>1.70</version> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.wss4j</groupId> |
| <artifactId>wss4j-policy</artifactId> |
| <version>${version.wss4j}</version> |
| <exclusions> |
| <exclusion> |
| <groupId>com.fasterxml.woodstox</groupId> |
| <artifactId>woodstox-core</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>org.codehaus.woodstox</groupId> |
| <artifactId>woodstox-core-asl</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>jakarta.xml.ws</groupId> |
| <artifactId>jakarta.xml.ws-api</artifactId> |
| </exclusion> |
| </exclusions> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.wss4j</groupId> |
| <artifactId>wss4j-ws-security-stax</artifactId> |
| <version>${version.wss4j}</version> |
| <exclusions> |
| <exclusion> |
| <groupId>net.sf.ehcache</groupId> |
| <artifactId>*</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>org.ehcache</groupId> |
| <artifactId>*</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>jakarta.xml.ws</groupId> |
| <artifactId>jakarta.xml.ws-api</artifactId> |
| </exclusion> |
| </exclusions> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.wss4j</groupId> |
| <artifactId>wss4j-ws-security-policy-stax</artifactId> |
| <version>${version.wss4j}</version> |
| <exclusions> |
| <exclusion> |
| <groupId>jakarta.xml.ws</groupId> |
| <artifactId>jakarta.xml.ws-api</artifactId> |
| </exclusion> |
| </exclusions> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.xbean</groupId> |
| <artifactId>xbean-finder-shaded</artifactId> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.geronimo.components</groupId> |
| <artifactId>geronimo-transaction</artifactId> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.xbean</groupId> |
| <artifactId>xbean-reflect</artifactId> |
| </dependency> |
| <dependency> |
| <groupId>org.slf4j</groupId> |
| <artifactId>slf4j-api</artifactId> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.tomee.bom</groupId> |
| <artifactId>jaxb-runtime</artifactId> |
| <type>pom</type> |
| </dependency> |
| <dependency> |
| <groupId>org.apache.tomee</groupId> |
| <artifactId>cxf-shade</artifactId> |
| <version>${project.version}</version> |
| <exclusions> |
| <exclusion> |
| <groupId>org.apache.cxf</groupId> |
| <artifactId>*</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>org.glassfish.jaxb</groupId> |
| <artifactId>*</artifactId> |
| </exclusion> |
| </exclusions> |
| </dependency> |
| <dependency> |
| <groupId>com.sun.xml.messaging.saaj</groupId> |
| <artifactId>saaj-impl</artifactId> |
| <version>${version.impl.saaj}</version> |
| <exclusions> |
| <exclusion> |
| <groupId>jakarta.activation</groupId> |
| <artifactId>jakarta.activation-api</artifactId> |
| </exclusion> |
| <exclusion> |
| <groupId>jakarta.xml.soap</groupId> |
| <artifactId>jakarta.xml.soap-api</artifactId> |
| </exclusion> |
| </exclusions> |
| </dependency> |
| <!-- This is required on IBM JDKs (and potentially others) because saaj-impl depends |
| on Sun's internal copy of Xerces. See OPENEJB-1126. --> |
| <dependency> |
| <groupId>com.sun.xml.parsers</groupId> |
| <artifactId>jaxp-ri</artifactId> |
| <version>1.4.5</version> |
| <scope>test</scope> |
| </dependency> |
| </dependencies> |
| |
| |
| </project> |