[
https://issues.apache.org/jira/browse/ZOOKEEPER-2906?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16183806#comment-16183806
]
ASF GitHub Bot commented on ZOOKEEPER-2906:
-------------------------------------------
Github user phunt commented on a diff in the pull request:
https://github.com/apache/zookeeper/pull/384#discussion_r141546115
--- Diff: build.xml ---
@@ -1558,8 +1565,8 @@ xmlns:cs="antlib:com.puppycrawl.tools.checkstyle.ant">
classpathref="releaseaudit-classpath"/>
</target>
- <target name="owasp-taskdef" depends="ivy-retrieve-releaseaudit">
--- End diff --
Notice that the release audit jars are being dumped into build/lib - I'd
recommend we fix that as part of this patch as well.
> The OWASP dependency check jar should not be included in the default classpath
> ------------------------------------------------------------------------------
>
> Key: ZOOKEEPER-2906
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2906
> Project: ZooKeeper
> Issue Type: Bug
> Affects Versions: 3.5.4, 3.6.0, 3.4.11
> Reporter: Abraham Fine
> Assignee: Abraham Fine
>
> The owasp dependency-check-ant jar that we use contains a SLF4J binding that
> can break logging. We should move it into a separate classpath.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
