[Fix] get rid of library "json-simple" - Githubissues

OWASP / SecurityShepherd

Web and mobile application security training platform

https://owasp.org/www-project-security-shepherd/

GNU General Public License v3.0

1.35k stars 460 forks source link

[Fix] get rid of library "json-simple" #732

Closed rudosch closed 2 years ago

rudosch commented 2 years ago

Reasons to get rid of library com.googlecode.json-simple :

causes a hidden dependency on the old version 4.10 of the junit library, flagged with a vulnerability
causes some deprecation warnings
concentration on the use of one single JSON library

These are the changes needed :

remove dependency from com.googlecode.json-simple in pom.xml
add explicit test context dependency to newest version 4.13.2 of junit in pom.xml
modify 7 Java files (import org.json instead of org.json.simple, adapt code)
BTW update dependency for org.json to version 20220924 in pom.xml
BTW correction of some erroneous Javadoc comments in Getter.java

PR will follow ...