[GH] (ofbiz-framework/OFBIZ-13684): Workflow run "Java CI with Gradle" is working again!

[GitBox <gi...@apache.org>]

The GitHub Actions job "Java CI with Gradle" on ofbiz-framework.git/OFBIZ-13684 has succeeded.
Run started by GitHub user mridulpathak (triggered by mridulpathak).

Head commit for run:
27adc8828c3b7db2a150be7f923ed7764c8fee98 / Mridul Pathak <mr...@gmail.com>
Improved: Replace OpenPDF with Apache PDFBox and drop the OpenPDF dependency (OFBIZ-13684)

OpenPDF 1.4.2 (com.lowagie) was only kept for PdfSurveyServices and SecuredUpload, while PDFBox 3 is already used for uploads and by Mustang. OFBiz now uses a single PDF library.

- SecuredUpload: the PDF probe and the JavaScript check now use PDFBox. The JavaScript check looks at every object of the document, those reachable from the trailer and those listed in the cross-reference table, instead of only the document-level JavaScript names tree, so JavaScript in OpenAction, Next chains, and document, page, annotation and form field actions is now rejected too.
- New allowPdfFormFieldScripts property in security.properties, false by default, to still accept PDF forms whose fields have keystroke, format, validate or calculate scripts.
- PdfSurveyServices: survey AcroForm handling ported to the PDFBox form field API, through a new package-private PdfFormHelper, with the same inputs and outputs. The question label now comes from the field's tooltip wherever it is set.
- buildPdfFromSurveyResponse now returns a PDF with one "question: answer" line per answer. It never opened its OpenPDF document, so it failed whenever the response had answers.
- Removed openpdf from libs.versions.toml and dependencies.gradle.

Report URL: https://github.com/apache/ofbiz-framework/actions/runs/38730236072

With regards,
GitHub Actions via GitBox