[GitHub] [spark] srowen commented on issue #27808: [SPARK-30994][BUILD][FOLLOW-UP] Change scope of xml-apis to include it

[GitBox <gi...@apache.org>]

srowen commented on issue #27808: [SPARK-30994][BUILD][FOLLOW-UP] Change scope of xml-apis to include it
URL: https://github.com/apache/spark/pull/27808#issuecomment-595217115
 
 
   Aha, OK that confirms https://issues.apache.org/jira/browse/SPARK-31043 (CC @tgravescs )
   I think we also need https://github.com/apache/spark/pull/27790 for sbt, but will have to check the status of xml-apis there too to be sure.
   
   I think this can likewise only be applied for Hadoop 2 profiles, but won't matter too much either way.
   
   Another view here is that this isn't worth it for updating xerces, and just revert that. There is a possible security issue there, but not clear it matters in Spark.
   
   WDYT? 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org