Update commons-pool2 2.7 and cleared all FindBug reports

git-svn-id: https://svn.apache.org/repos/asf/turbine/fulcrum/trunk/parser@1866490 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/pom.xml b/pom.xml
index 25a0039..da0b598 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,9 +118,8 @@
 	<dependency>

 	    <groupId>org.apache.commons</groupId>

 	    <artifactId>commons-pool2</artifactId>

-	    <version>2.6.2</version>

+	    <version>2.7.0</version>

 	</dependency>

-  

    <dependency>

       <groupId>org.apache.fulcrum</groupId>

       <artifactId>fulcrum-pool</artifactId>

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 8dca427..416bc46 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -33,6 +33,10 @@
             - rename config param name pool2 be more precise and avoiding name clash with fulcrum pool.
             - allow more pool2 configuration (overwrite common-pool defaults)
           </action>
+          <action dev="painter" type="update">
+            Update commons-pool2 2.7
+	    Cleared all FindBug reports
+          </action>
        </release>
         <release version="2.0.0" date="2019-18-03">
           <action dev="painter" type="update">
diff --git a/src/java/org/apache/fulcrum/parser/DefaultParameterParser.java b/src/java/org/apache/fulcrum/parser/DefaultParameterParser.java
index f87018d..8dda442 100644
--- a/src/java/org/apache/fulcrum/parser/DefaultParameterParser.java
+++ b/src/java/org/apache/fulcrum/parser/DefaultParameterParser.java
@@ -295,7 +295,8 @@
     @Override
     public byte[] getUploadData ()
     {
-        return this.uploadData;
+    	// return a clone safety re: EI_EXPOSE_REP
+        return this.uploadData.clone();
     }
 
     /**