Thanks for the pointer. The library we are using for supporting akismet hasn't been touched in 20 years. There is an alternative that is maintained. I'll try to hack up a solution using the newer library. It is licensed as BSD-3-Clause license which i'm pretty sure we can use.
On Fri, Nov 7, 2025 at 4:00 PM Juan Pablo Santos Rodríguez < [email protected]> wrote: > Hi! > > The captcha.jsp is used when the captcha support is activated; is one of > the top level jsps, so it's difficult to find direct references. > > By the way, those JSPs are similar to controllers in MVC. Back, really > back, in the day, they were a handy way of having an easy to redeploy, > "live" servlet, so you could have some kind of inmediate reload. IIRC, the > JSP in JSPWiki stems from those JSPs. > > Http-client is also a transitive dependency of the akismet api jar. > > best regards, > juan pablo > > > > El vie, 7 nov 2025, 19:24, Alex O'Ree <[email protected]> escribió: > > > I noticed that github flagged the usage/references or commons-httpclient > > version v3.1 in our repo, however the only place it is referenced is in > > jspwiki-war as a dependency of a maven plugin, > > specifically jspc-maven-plugin. I was able to remove this and still have > > the build run successfully and got the server booted. > > > > I did find one reference in a jsp file, Captcha.jsp. Anyone know if this > is > > still used or needed? I don't see any explicit references to it. Kind of > > surprised the jsp precompile didn't flag anything. > > > > Just want to double check before I break anything > > >
