You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hbase.apache.org by ni...@apache.org on 2024/09/11 04:58:38 UTC
(hbase) branch branch-3 updated: HBASE-28070 Replace javax.servlet.jsp dependency with tomcat-jasper (#5607) (#6236)
This is an automated email from the ASF dual-hosted git repository.
nihaljain pushed a commit to branch branch-3
in repository https://gitbox.apache.org/repos/asf/hbase.git
The following commit(s) were added to refs/heads/branch-3 by this push:
new 42a9a9ddaa7 HBASE-28070 Replace javax.servlet.jsp dependency with tomcat-jasper (#5607) (#6236)
42a9a9ddaa7 is described below
commit 42a9a9ddaa78b26e1d1fcf75ef2ac11c15119ad6
Author: Nihal Jain <ni...@apache.org>
AuthorDate: Wed Sep 11 10:28:32 2024 +0530
HBASE-28070 Replace javax.servlet.jsp dependency with tomcat-jasper (#5607) (#6236)
Signed-off-by: Istvan Toth <st...@apache.org>
Signed-off-by: Nick Dimiduk <nd...@apache.org>
(cherry picked from commit b6394b1f6420d2374790fb0aad48cc736ed9999c)
---
hbase-assembly/src/main/assembly/client.xml | 5 +++
.../src/main/assembly/hadoop-three-compat.xml | 5 +++
.../src/main/resources/supplemental-models.xml | 39 ----------------------
hbase-rest/pom.xml | 11 ++----
hbase-server/pom.xml | 4 +--
hbase-shaded/hbase-shaded-mapreduce/pom.xml | 4 +--
hbase-thrift/pom.xml | 11 ++----
pom.xml | 28 ++++++++++------
8 files changed, 36 insertions(+), 71 deletions(-)
diff --git a/hbase-assembly/src/main/assembly/client.xml b/hbase-assembly/src/main/assembly/client.xml
index f0ca402fd05..cd627ae9589 100644
--- a/hbase-assembly/src/main/assembly/client.xml
+++ b/hbase-assembly/src/main/assembly/client.xml
@@ -67,6 +67,11 @@
<exclude>io.opentelemetry.javaagent:*</exclude>
<exclude>org.hamcrest:hamcrest-core</exclude>
<exclude>org.mockito:mockito-core</exclude>
+ <!-- Exclude transitive dependencies of tomcat-jasper, not needed at runtime -->
+ <exclude>org.apache.tomcat:tomcat-juli</exclude>
+ <exclude>org.apache.tomcat:tomcat-api</exclude>
+ <exclude>org.apache.tomcat:tomcat-util-scan</exclude>
+ <exclude>org.apache.tomcat:tomcat-util</exclude>
</excludes>
</dependencySet>
</dependencySets>
diff --git a/hbase-assembly/src/main/assembly/hadoop-three-compat.xml b/hbase-assembly/src/main/assembly/hadoop-three-compat.xml
index 84a1bfa3681..e3100bb88fc 100644
--- a/hbase-assembly/src/main/assembly/hadoop-three-compat.xml
+++ b/hbase-assembly/src/main/assembly/hadoop-three-compat.xml
@@ -87,6 +87,11 @@
<exclude>junit:junit</exclude>
<exclude>org.hamcrest:hamcrest-core</exclude>
<exclude>org.mockito:mockito-core</exclude>
+ <!-- Exclude transitive dependencies of tomcat-jasper, not needed at runtime -->
+ <exclude>org.apache.tomcat:tomcat-juli</exclude>
+ <exclude>org.apache.tomcat:tomcat-api</exclude>
+ <exclude>org.apache.tomcat:tomcat-util-scan</exclude>
+ <exclude>org.apache.tomcat:tomcat-util</exclude>
</excludes>
</dependencySet>
</dependencySets>
diff --git a/hbase-resource-bundle/src/main/resources/supplemental-models.xml b/hbase-resource-bundle/src/main/resources/supplemental-models.xml
index 075463af20d..3e09323e66a 100644
--- a/hbase-resource-bundle/src/main/resources/supplemental-models.xml
+++ b/hbase-resource-bundle/src/main/resources/supplemental-models.xml
@@ -95,19 +95,6 @@ under the License.
</licenses>
</project>
</supplement>
- <supplement>
- <project>
- <groupId>org.glassfish</groupId>
- <artifactId>javax.el</artifactId>
- <licenses>
- <license>
- <name>CDDL 1.1</name>
- <url>https://glassfish.java.net/public/CDDL+GPL_1_1.html</url>
- <distribution>repo</distribution>
- </license>
- </licenses>
- </project>
- </supplement>
<supplement>
<project>
<groupId>org.glassfish.hk2</groupId>
@@ -264,32 +251,6 @@ under the License.
</licenses>
</project>
</supplement>
- <supplement>
- <project>
- <groupId>org.glassfish.web</groupId>
- <artifactId>javax.servlet.jsp</artifactId>
- <licenses>
- <license>
- <name>CDDL 1.1</name>
- <url>https://glassfish.java.net/public/CDDL+GPL_1_1.html</url>
- <distribution>repo</distribution>
- </license>
- </licenses>
- </project>
- </supplement>
- <supplement>
- <project>
- <groupId>org.glassfish.web</groupId>
- <artifactId>javax.servlet.jsp.jstl</artifactId>
- <licenses>
- <license>
- <name>CDDL 1.1</name>
- <url>https://glassfish.java.net/public/CDDL+GPL_1_1.html</url>
- <distribution>repo</distribution>
- </license>
- </licenses>
- </project>
- </supplement>
<supplement>
<project>
<groupId>org.bouncycastle</groupId>
diff --git a/hbase-rest/pom.xml b/hbase-rest/pom.xml
index e06c2318904..87b9898a9c4 100644
--- a/hbase-rest/pom.xml
+++ b/hbase-rest/pom.xml
@@ -190,15 +190,8 @@
</dependency>
<dependency>
<!--For JspC used in ant task-->
- <groupId>org.glassfish.web</groupId>
- <artifactId>javax.servlet.jsp</artifactId>
- </dependency>
- <!-- Specifically needed for jetty-jsp, included
- to bypass version scanning that hits a bad repo
- see HBASE-18831 -->
- <dependency>
- <groupId>org.glassfish</groupId>
- <artifactId>javax.el</artifactId>
+ <groupId>org.apache.tomcat</groupId>
+ <artifactId>tomcat-jasper</artifactId>
</dependency>
<dependency>
<groupId>org.apache.kerby</groupId>
diff --git a/hbase-server/pom.xml b/hbase-server/pom.xml
index c04947529bf..92b696d2fec 100644
--- a/hbase-server/pom.xml
+++ b/hbase-server/pom.xml
@@ -178,8 +178,8 @@
<!-- For JspC used in ant task, then needed at compile /runtime
because the source code made from the JSP refers to its runtime
-->
- <groupId>org.glassfish.web</groupId>
- <artifactId>javax.servlet.jsp</artifactId>
+ <groupId>org.apache.tomcat</groupId>
+ <artifactId>tomcat-jasper</artifactId>
</dependency>
<!-- Also used by generated sources from our JSP -->
<dependency>
diff --git a/hbase-shaded/hbase-shaded-mapreduce/pom.xml b/hbase-shaded/hbase-shaded-mapreduce/pom.xml
index 2e7aa6ed33a..03f9939b50e 100644
--- a/hbase-shaded/hbase-shaded-mapreduce/pom.xml
+++ b/hbase-shaded/hbase-shaded-mapreduce/pom.xml
@@ -101,8 +101,8 @@
<artifactId>jetty-util-ajax</artifactId>
</exclusion>
<exclusion>
- <groupId>org.glassfish</groupId>
- <artifactId>javax.el</artifactId>
+ <groupId>org.apache.tomcat</groupId>
+ <artifactId>tomcat-jasper</artifactId>
</exclusion>
<exclusion>
<groupId>org.eclipse.jetty</groupId>
diff --git a/hbase-thrift/pom.xml b/hbase-thrift/pom.xml
index 2abccff4615..992b4296029 100644
--- a/hbase-thrift/pom.xml
+++ b/hbase-thrift/pom.xml
@@ -105,15 +105,8 @@
</dependency>
<dependency>
<!--For JspC used in ant task-->
- <groupId>org.glassfish.web</groupId>
- <artifactId>javax.servlet.jsp</artifactId>
- </dependency>
- <!-- Specifically needed for jetty-jsp, included
- to bypass version scanning that hits a bad repo
- see HBASE-18831 -->
- <dependency>
- <groupId>org.glassfish</groupId>
- <artifactId>javax.el</artifactId>
+ <groupId>org.apache.tomcat</groupId>
+ <artifactId>tomcat-jasper</artifactId>
</dependency>
<dependency>
<groupId>org.apache.kerby</groupId>
diff --git a/pom.xml b/pom.xml
index 280afddb186..1a26ba884b4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -839,8 +839,7 @@
<jaxb-api.version>2.3.1</jaxb-api.version>
<servlet.api.version>3.1.0</servlet.api.version>
<wx.rs.api.version>2.1.1</wx.rs.api.version>
- <glassfish.jsp.version>2.3.2</glassfish.jsp.version>
- <glassfish.el.version>3.0.1-b08</glassfish.el.version>
+ <tomcat.jasper.version>9.0.93</tomcat.jasper.version>
<jruby.version>9.4.8.0</jruby.version>
<junit.version>4.13.2</junit.version>
<hamcrest.version>1.3</hamcrest.version>
@@ -1548,9 +1547,23 @@
</dependency>
<dependency>
<!--This lib has JspC in it. Needed precompiling jsps in hbase-rest, etc.-->
- <groupId>org.glassfish.web</groupId>
- <artifactId>javax.servlet.jsp</artifactId>
- <version>${glassfish.jsp.version}</version>
+ <groupId>org.apache.tomcat</groupId>
+ <artifactId>tomcat-jasper</artifactId>
+ <version>${tomcat.jasper.version}</version>
+ <exclusions>
+ <exclusion>
+ <groupId>org.eclipse.jdt</groupId>
+ <artifactId>ecj</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.tomcat</groupId>
+ <artifactId>tomcat-servlet-api</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.tomcat</groupId>
+ <artifactId>tomcat-jsp-api</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<dependency>
<!-- this lib is used by the compiled Jsp from the above JspC -->
@@ -1558,11 +1571,6 @@
<artifactId>javax.servlet.jsp-api</artifactId>
<version>2.3.1</version>
</dependency>
- <dependency>
- <groupId>org.glassfish</groupId>
- <artifactId>javax.el</artifactId>
- <version>${glassfish.el.version}</version>
- </dependency>
<dependency>
<groupId>javax.xml.bind</groupId>
<artifactId>jaxb-api</artifactId>