I noticed that github flagged the usage/references or commons-httpclient version v3.1 in our repo, however the only place it is referenced is in jspwiki-war as a dependency of a maven plugin, specifically jspc-maven-plugin. I was able to remove this and still have the build run successfully and got the server booted.
I did find one reference in a jsp file, Captcha.jsp. Anyone know if this is still used or needed? I don't see any explicit references to it. Kind of surprised the jsp precompile didn't flag anything. Just want to double check before I break anything
