MODULE REMOVAL, SECURITY - Removed Log4J 1.x log adapter.

Github warns me that Log4J 1.x has a security issue (CVE-2019-17571 ) with no updated version available (apparently EOL). I don't think the security issue affects our use of this module but I don't want a JAR with security issues in the build. I also note this module code has incorrect logger names and I doubt anyone is using it.
danfickle · Jan 29, 2020 · 82bdeda · 82bdeda
1 parent 1bfedae
commit 82bdeda
Show file tree

Hide file tree

Showing 3 changed files with 0 additions and 165 deletions.
diff --git a/openhtmltopdf-log4j/pom.xml b/openhtmltopdf-log4j/pom.xml
diff --git a/openhtmltopdf-log4j/src/main/java/com/openhtmltopdf/log4j/Log4JXRLogger.java b/openhtmltopdf-log4j/src/main/java/com/openhtmltopdf/log4j/Log4JXRLogger.java
diff --git a/pom.xml b/pom.xml
@@ -23,7 +23,6 @@
 
   <modules>
     <module>openhtmltopdf-core</module>
-    <module>openhtmltopdf-log4j</module>
     <module>openhtmltopdf-slf4j</module>
     <module>openhtmltopdf-examples</module>
     <module>openhtmltopdf-pdfbox</module>