[
https://issues.apache.org/jira/browse/SHIRO-180?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12920113#action_12920113
]
Les Hazlewood commented on SHIRO-180:
-------------------------------------
I think Servlet 2.5 is good enough, but all the other non-spec dependencies
should probably be upgraded to the latest, e.g. Spring 3.0.4, Ehcache 2.2.
I.e. everything for which there is a 'support' module.
If we go w/ Servlet 2.5, we won't be able to eliminate our Cookie
implementation IIUC, since 2.5 still doesn't support the httpOnly attribute.
> Upgrade 3rd party dependencies to latest stable versions
> --------------------------------------------------------
>
> Key: SHIRO-180
> URL: https://issues.apache.org/jira/browse/SHIRO-180
> Project: Shiro
> Issue Type: Improvement
> Affects Versions: 1.0.0
> Reporter: Les Hazlewood
> Fix For: 1.1.0
>
>
> Our current dependency on Ehcache (1.4.1) and the Servlet API (2.4) are out
> of date and are causing dependency problems on many projects (Ehcache 1.4.1
> is from 2004: 6.5 years old!). Our next release should change all 3rd party
> dependencies (not only Ehcache and the Servlet API) to the latest stable
> versions of each.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
