search

52North / WPS

**DEPRECATED** The 52°North Web Processing Service enables the deployment of geo-processes on the web in a standardized way.
GNU General Public License v2.0
63 stars 55 forks source link

Use newer BeanShell 2.0b6 #230

Open stain opened 8 years ago

stain commented 8 years ago

This fixes the possibly remote code execution security vulnerability CVE-2016-2510

See https://github.com/beanshell/beanshell/releases/tag/2.0b6 for details.

(2.0b6 should be backwards compatible with 2.0b4 - however it is released under the Apache License 2.0 - see NOTICE and LICENSE at https://github.com/beanshell/beanshell)

bpross-52n commented 8 years ago

Thanks for this, the tests are failing, though. Seems to be a maven problem . Also note that we will need a signed Contributors Licence Agreement from you before we can accept this PR. You can find more info here: http://52north.org/about/licensing/cla-guidelines

stain commented 8 years ago

I don't consider my small change copyrightable as a Work, so feel free to apply the suggested changes manually without an CLA.

I don't know how to fix this error:

Existing NOTICE file '/home/travis/build/52North/WPS/NOTICE' doesn't match expected NOTICE file: /home/travis/build/52North/WPS/target/NOTICE.expected -> [Help 1]