owasp encoder with commons-lang3 instead of commons-lang

[chnaahmad]

Hi All, actually we are moving / upgrading our system to commons-lang3 instead of commons-lang. That's why i want to know that "Is owasp Encoder work with commons-lang3?" currently i am seeing that owasp Encoder has dependency over commons-lang 2. 6. Would you please help me to sort out this problem. Naeem

[jmanico]

Just want you to know that we got this bug report and are evaluating it.

Aloha, Jim

On Feb 19, 2018, at 4:20 PM, chnaahmad notifications@github.com wrote:

Hi All, actually we are moving / upgrading our system to commons-lang3 instead of commons-lang. That's why i want to know that "Is owasp Encoder work with commons-lang3?" currently i am seeing that owasp Encoder has dependency over commons-lang 2. 6. Would you please help me to sort out this problem. Naeem

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

[jmanico]

• The Core of the Java Encoder has zero dependencies

• The JSP encoder taglib only uses the core and

  <dependency>
      <groupId>javax.servlet.jsp</groupId>
      <artifactId>javax.servlet.jsp-api</artifactId>
      <version>2.2.1</version>
      <optional>true</optional>
  </dependency>

• However, if you are using ESAPI that lib (a different project) has several other dependencies.

So no part of The Java encoder should be effected by the upgrade to commons.

[jmanico]

So no part of The Java encoder should be effected by the upgrade to commons.