1<?xml version="1.0" encoding="US-ASCII"?> 2<!-- 3~ Copyright (c) 2015 OWASP. 4~ All rights reserved. 5~ 6~ Redistribution and use in source and binary forms, with or without 7~ modification, are permitted provided that the following conditions 8~ are met: 9~ 10~ * Redistributions of source code must retain the above 11~ copyright notice, this list of conditions and the following 12~ disclaimer. 13~ 14~ * Redistributions in binary form must reproduce the above 15~ copyright notice, this list of conditions and the following 16~ disclaimer in the documentation and/or other materials 17~ provided with the distribution. 18~ 19~ * Neither the name of the OWASP nor the names of its 20~ contributors may be used to endorse or promote products 21~ derived from this software without specific prior written 22~ permission. 23~ 24~ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 25~ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 26~ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 27~ FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE 28~ COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, 29~ INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 30~ (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 31~ SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 32~ HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 33~ STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 34~ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 35~ OF THE POSSIBILITY OF SUCH DAMAGE. 36--> 37 38<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 39 xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"> 40 <modelVersion>4.0.0</modelVersion> 41 42 <groupId>org.owasp.encoder</groupId> 43 <artifactId>encoder-parent</artifactId> 44 <version>1.3.1</version> 45 <packaging>pom</packaging> 46 47 <name>OWASP Java Encoder Project</name> 48 <description> 49 The OWASP Encoders package is a collection of high-performance low-overhead 50 contextual encoders, that when utilized correctly, is an effective tool in 51 preventing Web Application security vulnerabilities such as Cross-Site 52 Scripting. 53 </description> 54 55 <modules> 56 <module>core</module> 57 <module>jsp</module> 58 <module>jakarta</module> 59 <module>esapi</module> 60 </modules> 61 62 <url>https://www.owasp.org/index.php/OWASP_Java_Encoder_Project</url> 63 <inceptionYear>2011</inceptionYear> 64 <organization> 65 <name>OWASP (Open Web-Application Security Project)</name> 66 <url>https://www.owasp.org/</url> 67 </organization> 68 69 <licenses> 70 <license> 71 <name>The BSD 3-Clause License</name> 72 <url>http://www.opensource.org/licenses/BSD-3-Clause</url> 73 <distribution>repo</distribution> 74 </license> 75 </licenses> 76 77 <parent> 78 <groupId>org.sonatype.oss</groupId> 79 <artifactId>oss-parent</artifactId> 80 <version>9</version> 81 </parent> 82 83 <scm> 84 <developerConnection>scm:git:git@github.com:owasp/owasp-java-encoder.git</developerConnection> 85 <connection>scm:git:git@github.com:owasp/owasp-java-encoder.git</connection> 86 <url>https://github.com/owasp/owasp-java-encoder</url> 87 </scm> 88 <distributionManagement> 89 <site> 90 <id>gh-pages</id> 91 <name>gh-pages</name> 92 <url>http://owasp.github.io/owasp-java-encoder</url> 93 </site> 94 </distributionManagement> 95 <mailingLists> 96 <mailingList> 97 <name>OWASP Java Encoder Issues at GitHub</name> 98 <subscribe>https://github.com/OWASP/owasp-java-encoder/issues</subscribe> 99 <unsubscribe>https://github.com/OWASP/owasp-java-encoder/issues</unsubscribe> 100 <post>https://github.com/OWASP/owasp-java-encoder/issues</post> 101 <archive>https://github.com/OWASP/owasp-java-encoder/issues</archive> 102 </mailingList> 103 </mailingLists> 104 105 <issueManagement> 106 <system>github</system> 107 <url>https://github.com/owasp/owasp-java-encoder/issues</url> 108 </issueManagement> 109 110 <developers> 111 <developer> 112 <name>Jeff Ichnowski</name> 113 <roles> 114 <role>Project Owner</role> 115 <role>Architect</role> 116 <role>Developer</role> 117 </roles> 118 </developer> 119 <developer> 120 <name>Jim Manico</name> 121 <organization>OWASP</organization> 122 <organizationUrl>https://www.owasp.org/</organizationUrl> 123 <roles> 124 <role>Architect</role> 125 <role>Developer</role> 126 </roles> 127 </developer> 128 <developer> 129 <name>Jeremy Long</name> 130 <email>jeremy.long@owasp.org</email> 131 <organization>OWASP</organization> 132 <organizationUrl>https://www.owasp.org/</organizationUrl> 133 <roles> 134 <role>developer</role> 135 </roles> 136 </developer> 137 </developers> 138 139 <properties> 140 <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> 141 <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding> 142 </properties> 143 144 <dependencyManagement> 145 <dependencies> 146 <dependency> 147 <groupId>junit</groupId> 148 <artifactId>junit</artifactId> 149 <version>3.8.2</version> 150 </dependency> 151 </dependencies> 152 </dependencyManagement> 153 <dependencies> 154 <dependency> 155 <groupId>junit</groupId> 156 <artifactId>junit</artifactId> 157 <scope>test</scope> 158 </dependency> 159 </dependencies> 160 <build> 161 <pluginManagement> 162 <plugins> 163 <plugin> 164 <groupId>org.apache.maven.plugins</groupId> 165 <artifactId>maven-compiler-plugin</artifactId> 166 <version>3.10.1</version> 167 </plugin> 168 <plugin> 169 <groupId>org.apache.maven.plugins</groupId> 170 <artifactId>maven-jar-plugin</artifactId> 171 <version>3.3.0</version> 172 </plugin> 173 <plugin> 174 <groupId>org.apache.maven.plugins</groupId> 175 <artifactId>maven-source-plugin</artifactId> 176 <version>3.2.1</version> 177 </plugin> 178 <plugin> 179 <groupId>org.apache.maven.plugins</groupId> 180 <artifactId>maven-javadoc-plugin</artifactId> 181 <version>3.4.0</version> 182 </plugin> 183 <plugin> 184 <groupId>org.jacoco</groupId> 185 <artifactId>jacoco-maven-plugin</artifactId> 186 <version>0.8.8</version> 187 </plugin> 188 <plugin> 189 <groupId>org.apache.maven.plugins</groupId> 190 <artifactId>maven-failsafe-plugin</artifactId> 191 <version>2.19.1</version> 192 </plugin> 193 <plugin> 194 <groupId>org.apache.maven.plugins</groupId> 195 <artifactId>maven-surefire-plugin</artifactId> 196 <version>2.19.1</version> 197 </plugin> 198 <plugin> 199 <groupId>org.apache.maven.plugins</groupId> 200 <artifactId>maven-surefire-report-plugin</artifactId> 201 <version>2.19.1</version> 202 </plugin> 203 <plugin> 204 <groupId>org.apache.maven.plugins</groupId> 205 <artifactId>maven-gpg-plugin</artifactId> 206 <version>1.6</version> 207 </plugin> 208 <plugin> 209 <groupId>org.apache.maven.plugins</groupId> 210 <artifactId>maven-site-plugin</artifactId> 211 <!-- upgrading beyond 3.4 may break the reflow skin --> 212 <version>3.4</version> 213 <dependencies> 214 <dependency> 215 <groupId>lt.velykis.maven.skins</groupId> 216 <artifactId>reflow-velocity-tools</artifactId> 217 <version>1.1.1</version> 218 </dependency> 219 <!-- Reflow skin requires Velocity >= 1.7 --> 220 <dependency> 221 <groupId>org.apache.velocity</groupId> 222 <artifactId>velocity</artifactId> 223 <version>1.7</version> 224 </dependency> 225 <dependency> 226 <groupId>org.apache.maven.doxia</groupId> 227 <artifactId>doxia-module-markdown</artifactId> 228 <version>1.6</version> 229 </dependency> 230 </dependencies> 231 </plugin> 232 <plugin> 233 <groupId>org.apache.maven.plugins</groupId> 234 <artifactId>maven-project-info-reports-plugin</artifactId> 235 <version>2.9</version> 236 </plugin> 237 <plugin> 238 <groupId>org.apache.maven.plugins</groupId> 239 <artifactId>maven-pmd-plugin</artifactId> 240 <version>3.6</version> 241 </plugin> 242 <plugin> 243 <groupId>org.apache.felix</groupId> 244 <artifactId>maven-bundle-plugin</artifactId> 245 <version>3.5.1</version> 246 </plugin> 247 <plugin> 248 <groupId>org.codehaus.mojo</groupId> 249 <artifactId>versions-maven-plugin</artifactId> 250 <version>2.3</version> 251 </plugin> 252 <plugin> 253 <groupId>org.apache.maven.plugins</groupId> 254 <artifactId>maven-jxr-plugin</artifactId> 255 <version>2.5</version> 256 </plugin> 257 <plugin> 258 <groupId>org.codehaus.mojo</groupId> 259 <artifactId>findbugs-maven-plugin</artifactId> 260 <version>3.0.4</version> 261 </plugin> 262 </plugins> 263 </pluginManagement> 264 265 <plugins> 266 <plugin> 267 <groupId>org.apache.maven.plugins</groupId> 268 <artifactId>maven-compiler-plugin</artifactId> 269 <executions> 270 <execution> 271 <id>compile-java-8</id> 272 <goals> 273 <goal>compile</goal> 274 </goals> 275 <configuration> 276 <release>8</release> 277 </configuration> 278 </execution> 279 <execution> 280 <id>compile-java-9</id> 281 <phase>compile</phase> 282 <goals> 283 <goal>compile</goal> 284 </goals> 285 <configuration> 286 <release>9</release> 287 <compileSourceRoots> 288 <compileSourceRoot>${project.basedir}/src/main/java9</compileSourceRoot> 289 </compileSourceRoots> 290 <multiReleaseOutput>true</multiReleaseOutput> 291 </configuration> 292 </execution> 293 </executions> 294 </plugin> 295 <plugin> 296 <groupId>org.apache.felix</groupId> 297 <artifactId>maven-bundle-plugin</artifactId> 298 <executions> 299 <execution> 300 <id>default-bundle</id> 301 <phase>process-classes</phase> 302 <goals> 303 <goal>manifest</goal> 304 </goals> 305 <configuration> 306 <excludeDependencies>true</excludeDependencies> 307 <instructions> 308 <_noee>true</_noee> 309 <_nouses>true</_nouses> 310 <Automatic-Module-Name>${jigsaw.module.name}</Automatic-Module-Name> 311 </instructions> 312 </configuration> 313 </execution> 314 </executions> 315 </plugin> 316 <plugin> 317 <groupId>org.jacoco</groupId> 318 <artifactId>jacoco-maven-plugin</artifactId> 319 <executions> 320 <execution> 321 <id>prepare-agent</id> 322 <goals> 323 <goal>prepare-agent</goal> 324 </goals> 325 <configuration> 326 <propertyName>surefireArgLine</propertyName> 327 </configuration> 328 </execution> 329 </executions> 330 </plugin> 331 <plugin> 332 <groupId>org.apache.maven.plugins</groupId> 333 <artifactId>maven-surefire-plugin</artifactId> 334 <configuration> 335 <excludes> 336 <exclude>org/owasp/encoder/BenchmarkTest.java</exclude> 337 </excludes> 338 <argLine>${surefireArgLine}</argLine> 339 </configuration> 340 </plugin> 341 <plugin> 342 <groupId>org.apache.maven.plugins</groupId> 343 <artifactId>maven-jar-plugin</artifactId> 344 <configuration> 345 <archive> 346 <manifestFile>${project.build.outputDirectory}/META-INF/MANIFEST.MF</manifestFile> 347 <manifestEntries> 348 <Multi-Release>true</Multi-Release> 349 </manifestEntries> 350 </archive> 351 </configuration> 352 </plugin> 353 <plugin> 354 <groupId>org.apache.maven.plugins</groupId> 355 <artifactId>maven-source-plugin</artifactId> 356 <executions> 357 <execution> 358 <id>attach-sources</id> 359 <phase>package</phase> 360 <goals> 361 <goal>jar</goal> 362 </goals> 363 </execution> 364 </executions> 365 </plugin> 366 <plugin> 367 <groupId>org.apache.maven.plugins</groupId> 368 <artifactId>maven-javadoc-plugin</artifactId> 369 <configuration> 370 <source>8</source> 371 <failOnError>false</failOnError> 372 </configuration> 373 <executions> 374 <execution> 375 <id>attach-javadocs</id> 376 <phase>package</phase> 377 <goals> 378 <goal>jar</goal> 379 </goals> 380 </execution> 381 </executions> 382 </plugin> 383 <plugin> 384 <groupId>org.apache.maven.plugins</groupId> 385 <artifactId>maven-site-plugin</artifactId> 386 </plugin> 387 </plugins> 388 </build> 389 <reporting> 390 <plugins> 391 <plugin> 392 <groupId>org.apache.maven.plugins</groupId> 393 <artifactId>maven-project-info-reports-plugin</artifactId> 394 <reportSets> 395 <reportSet> 396 <reports> 397 <report>index</report> 398 <report>summary</report> 399 <report>license</report> 400 <report>scm</report> 401 <report>mailing-list</report> 402 <report>issue-tracking</report> 403 <report>dependencies</report> 404 <report>plugin-management</report> 405 <report>project-team</report> 406 </reports> 407 </reportSet> 408 </reportSets> 409 </plugin> 410 <plugin> 411 <groupId>org.codehaus.mojo</groupId> 412 <artifactId>versions-maven-plugin</artifactId> 413 <reportSets> 414 <reportSet> 415 <reports> 416 <report>dependency-updates-report</report> 417 <report>plugin-updates-report</report> 418 </reports> 419 </reportSet> 420 </reportSets> 421 </plugin> 422 <plugin> 423 <groupId>org.apache.maven.plugins</groupId> 424 <artifactId>maven-jxr-plugin</artifactId> 425 </plugin> 426 <plugin> 427 <groupId>org.apache.maven.plugins</groupId> 428 <artifactId>maven-surefire-report-plugin</artifactId> 429 <reportSets> 430 <reportSet> 431 <reports> 432 <report>report-only</report> 433 <report>failsafe-report-only</report> 434 </reports> 435 </reportSet> 436 </reportSets> 437 </plugin> 438 <plugin> 439 <groupId>org.jacoco</groupId> 440 <artifactId>jacoco-maven-plugin</artifactId> 441 <reportSets> 442 <reportSet> 443 <reports> 444 <!-- select non-aggregate reports --> 445 <report>report</report> 446 </reports> 447 </reportSet> 448 </reportSets> 449 </plugin> 450 <plugin> 451 <groupId>org.apache.maven.plugins</groupId> 452 <artifactId>maven-pmd-plugin</artifactId> 453 <configuration> 454 <targetJdk>1.8</targetJdk> 455 <linkXref>true</linkXref> 456 <sourceEncoding>utf-8</sourceEncoding> 457 </configuration> 458 </plugin> 459 <plugin> 460 <groupId>org.apache.maven.plugins</groupId> 461 <artifactId>maven-javadoc-plugin</artifactId> 462 <reportSets> 463 <reportSet> 464 <id>default</id> 465 <reports> 466 <report>javadoc</report> 467 </reports> 468 <configuration> 469 <source>8</source> 470 <failOnError>false</failOnError> 471 </configuration> 472 </reportSet> 473 </reportSets> 474 </plugin> 475 <plugin> 476 <groupId>org.apache.maven.plugins</groupId> 477 <artifactId>maven-checkstyle-plugin</artifactId> 478 <configuration> 479 <configLocation>src/main/config/checkstyle.xml</configLocation> 480 <headerLocation>src/main/config/checkstyle-header.txt</headerLocation> 481 </configuration> 482 </plugin> 483 <plugin> 484 <groupId>org.codehaus.mojo</groupId> 485 <artifactId>findbugs-maven-plugin</artifactId> 486 </plugin> 487 </plugins> 488 </reporting> 489 <profiles> 490 <profile> 491 <id>sign-artifacts</id> 492 <activation> 493 <property> 494 <name>performRelease</name> 495 <value>true</value> 496 </property> 497 </activation> 498 <build> 499 <plugins> 500 <plugin> 501 <groupId>org.apache.maven.plugins</groupId> 502 <artifactId>maven-gpg-plugin</artifactId> 503 <executions> 504 <execution> 505 <id>sign-artifacts</id> 506 <phase>verify</phase> 507 <goals> 508 <goal>sign</goal> 509 </goals> 510 </execution> 511 </executions> 512 </plugin> 513 </plugins> 514 </build> 515 </profile> 516 <profile> 517 <id>testJakarta</id> 518 <activation> 519 <activeByDefault>false</activeByDefault> 520 </activation> 521 <modules> 522 <module>jakarta-test</module> 523 </modules> 524 </profile> 525 </profiles> 526</project> 527