1<?xml version="1.0" encoding="US-ASCII"?> 2<!-- 3~ Copyright (c) 2015 OWASP. 4~ All rights reserved. 5~ 6~ Redistribution and use in source and binary forms, with or without 7~ modification, are permitted provided that the following conditions 8~ are met: 9~ 10~ * Redistributions of source code must retain the above 11~ copyright notice, this list of conditions and the following 12~ disclaimer. 13~ 14~ * Redistributions in binary form must reproduce the above 15~ copyright notice, this list of conditions and the following 16~ disclaimer in the documentation and/or other materials 17~ provided with the distribution. 18~ 19~ * Neither the name of the OWASP nor the names of its 20~ contributors may be used to endorse or promote products 21~ derived from this software without specific prior written 22~ permission. 23~ 24~ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 25~ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 26~ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 27~ FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE 28~ COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, 29~ INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 30~ (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 31~ SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 32~ HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 33~ STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 34~ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 35~ OF THE POSSIBILITY OF SUCH DAMAGE. 36--> 37 38<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 39 xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"> 40 <modelVersion>4.0.0</modelVersion> 41 42 <groupId>org.owasp.encoder</groupId> 43 <artifactId>encoder-parent</artifactId> 44 <version>1.2.3</version> 45 <packaging>pom</packaging> 46 47 <name>OWASP Java Encoder Project</name> 48 <description> 49 The OWASP Encoders package is a collection of high-performance low-overhead 50 contextual encoders, that when utilized correctly, is an effective tool in 51 preventing Web Application security vulnerabilities such as Cross-Site 52 Scripting. 53 </description> 54 55 <modules> 56 <module>core</module> 57 <module>jsp</module> 58 <module>esapi</module> 59 </modules> 60 61 <url>https://www.owasp.org/index.php/OWASP_Java_Encoder_Project</url> 62 <inceptionYear>2011</inceptionYear> 63 <organization> 64 <name>OWASP (Open Web-Application Security Project)</name> 65 <url>https://www.owasp.org/</url> 66 </organization> 67 68 <licenses> 69 <license> 70 <name>The BSD 3-Clause License</name> 71 <url>http://www.opensource.org/licenses/BSD-3-Clause</url> 72 <distribution>repo</distribution> 73 </license> 74 </licenses> 75 76 <parent> 77 <groupId>org.sonatype.oss</groupId> 78 <artifactId>oss-parent</artifactId> 79 <version>9</version> 80 </parent> 81 82 <scm> 83 <developerConnection>scm:git:[email protected]:owasp/owasp-java-encoder.git</developerConnection> 84 <connection>scm:git:[email protected]:owasp/owasp-java-encoder.git</connection> 85 <url>https://github.com/owasp/owasp-java-encoder</url> 86 </scm> 87 <distributionManagement> 88 <site> 89 <id>gh-pages</id> 90 <name>gh-pages</name> 91 <url>http://owasp.github.io/owasp-java-encoder</url> 92 </site> 93 </distributionManagement> 94 <mailingLists> 95 <mailingList> 96 <name>Owasp-java-encoder-project</name> 97 <subscribe>https://lists.owasp.org/mailman/listinfo/owasp-java-encoder-project</subscribe> 98 <unsubscribe>https://lists.owasp.org/mailman/listinfo/owasp-java-encoder-project</unsubscribe> 99 <post>[email protected]</post> 100 <archive>http://lists.owasp.org/pipermail/owasp-java-encoder-project/</archive> 101 </mailingList> 102 </mailingLists> 103 104 <issueManagement> 105 <system>github</system> 106 <url>https://github.com/owasp/owasp-java-encoder/issues</url> 107 </issueManagement> 108 109 <developers> 110 <developer> 111 <name>Jeff Ichnowski</name> 112 <roles> 113 <role>Project Owner</role> 114 <role>Architect</role> 115 <role>Developer</role> 116 </roles> 117 </developer> 118 <developer> 119 <name>Jim Manico</name> 120 <organization>OWASP</organization> 121 <organizationUrl>https://www.owasp.org/</organizationUrl> 122 <roles> 123 <role>Architect</role> 124 <role>Developer</role> 125 </roles> 126 </developer> 127 <developer> 128 <name>Jeremy Long</name> 129 <email>[email protected]</email> 130 <organization>OWASP</organization> 131 <organizationUrl>https://www.owasp.org/</organizationUrl> 132 <roles> 133 <role>developer</role> 134 </roles> 135 </developer> 136 </developers> 137 138 <properties> 139 <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> 140 <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding> 141 </properties> 142 143 <dependencyManagement> 144 <dependencies> 145 <dependency> 146 <groupId>junit</groupId> 147 <artifactId>junit</artifactId> 148 <version>3.8.2</version> 149 </dependency> 150 </dependencies> 151 </dependencyManagement> 152 <dependencies> 153 <dependency> 154 <groupId>junit</groupId> 155 <artifactId>junit</artifactId> 156 <scope>test</scope> 157 </dependency> 158 </dependencies> 159 <build> 160 <pluginManagement> 161 <plugins> 162 <plugin> 163 <groupId>org.apache.maven.plugins</groupId> 164 <artifactId>maven-compiler-plugin</artifactId> 165 <version>3.10.1</version> 166 </plugin> 167 <plugin> 168 <groupId>org.apache.maven.plugins</groupId> 169 <artifactId>maven-jar-plugin</artifactId> 170 <version>3.2.2</version> 171 </plugin> 172 <plugin> 173 <groupId>org.apache.maven.plugins</groupId> 174 <artifactId>maven-source-plugin</artifactId> 175 <version>3.2.1</version> 176 </plugin> 177 <plugin> 178 <groupId>org.apache.maven.plugins</groupId> 179 <artifactId>maven-javadoc-plugin</artifactId> 180 <version>3.4.0</version> 181 </plugin> 182 <plugin> 183 <groupId>org.jacoco</groupId> 184 <artifactId>jacoco-maven-plugin</artifactId> 185 <version>0.8.8</version> 186 </plugin> 187 <plugin> 188 <groupId>org.apache.maven.plugins</groupId> 189 <artifactId>maven-failsafe-plugin</artifactId> 190 <version>2.19.1</version> 191 </plugin> 192 <plugin> 193 <groupId>org.apache.maven.plugins</groupId> 194 <artifactId>maven-surefire-plugin</artifactId> 195 <version>2.19.1</version> 196 </plugin> 197 <plugin> 198 <groupId>org.apache.maven.plugins</groupId> 199 <artifactId>maven-surefire-report-plugin</artifactId> 200 <version>2.19.1</version> 201 </plugin> 202 <plugin> 203 <groupId>org.apache.maven.plugins</groupId> 204 <artifactId>maven-gpg-plugin</artifactId> 205 <version>1.6</version> 206 </plugin> 207 <plugin> 208 <groupId>org.apache.maven.plugins</groupId> 209 <artifactId>maven-site-plugin</artifactId> 210 <!-- upgrading beyond 3.4 may break the reflow skin --> 211 <version>3.4</version> 212 <dependencies> 213 <dependency> 214 <groupId>lt.velykis.maven.skins</groupId> 215 <artifactId>reflow-velocity-tools</artifactId> 216 <version>1.1.1</version> 217 </dependency> 218 <!-- Reflow skin requires Velocity >= 1.7 --> 219 <dependency> 220 <groupId>org.apache.velocity</groupId> 221 <artifactId>velocity</artifactId> 222 <version>1.7</version> 223 </dependency> 224 <dependency> 225 <groupId>org.apache.maven.doxia</groupId> 226 <artifactId>doxia-module-markdown</artifactId> 227 <version>1.6</version> 228 </dependency> 229 </dependencies> 230 </plugin> 231 <plugin> 232 <groupId>org.apache.maven.plugins</groupId> 233 <artifactId>maven-project-info-reports-plugin</artifactId> 234 <version>2.9</version> 235 </plugin> 236 <plugin> 237 <groupId>org.apache.maven.plugins</groupId> 238 <artifactId>maven-pmd-plugin</artifactId> 239 <version>3.6</version> 240 </plugin> 241 <plugin> 242 <groupId>org.apache.felix</groupId> 243 <artifactId>maven-bundle-plugin</artifactId> 244 <version>3.3.0</version> 245 </plugin> 246 <plugin> 247 <groupId>org.codehaus.mojo</groupId> 248 <artifactId>versions-maven-plugin</artifactId> 249 <version>2.3</version> 250 </plugin> 251 <plugin> 252 <groupId>org.apache.maven.plugins</groupId> 253 <artifactId>maven-jxr-plugin</artifactId> 254 <version>2.5</version> 255 </plugin> 256 <plugin> 257 <groupId>org.codehaus.mojo</groupId> 258 <artifactId>findbugs-maven-plugin</artifactId> 259 <version>3.0.4</version> 260 </plugin> 261 </plugins> 262 </pluginManagement> 263 264 <plugins> 265 <plugin> 266 <groupId>org.apache.maven.plugins</groupId> 267 <artifactId>maven-compiler-plugin</artifactId> 268 <configuration> 269 <source>1.6</source> 270 <target>1.6</target> 271 </configuration> 272 </plugin> 273 <plugin> 274 <groupId>org.apache.felix</groupId> 275 <artifactId>maven-bundle-plugin</artifactId> 276 <executions> 277 <execution> 278 <id>default-bundle</id> 279 <phase>process-classes</phase> 280 <goals> 281 <goal>manifest</goal> 282 </goals> 283 <configuration> 284 <excludeDependencies>true</excludeDependencies> 285 <instructions> 286 <_noee>true</_noee> 287 <_nouses>true</_nouses> 288 <Automatic-Module-Name>${jigsaw.module.name}</Automatic-Module-Name> 289 </instructions> 290 </configuration> 291 </execution> 292 </executions> 293 </plugin> 294 <plugin> 295 <groupId>org.jacoco</groupId> 296 <artifactId>jacoco-maven-plugin</artifactId> 297 <executions> 298 <execution> 299 <id>prepare-agent</id> 300 <goals> 301 <goal>prepare-agent</goal> 302 </goals> 303 <configuration> 304 <propertyName>surefireArgLine</propertyName> 305 </configuration> 306 </execution> 307 </executions> 308 </plugin> 309 <plugin> 310 <groupId>org.apache.maven.plugins</groupId> 311 <artifactId>maven-surefire-plugin</artifactId> 312 <configuration> 313 <excludes> 314 <exclude>org/owasp/encoder/BenchmarkTest.java</exclude> 315 </excludes> 316 <argLine>${surefireArgLine}</argLine> 317 </configuration> 318 </plugin> 319 <plugin> 320 <groupId>org.apache.maven.plugins</groupId> 321 <artifactId>maven-jar-plugin</artifactId> 322 <executions> 323 <execution> 324 <id>default-jar</id> 325 <phase>package</phase> 326 <goals> 327 <goal>jar</goal> 328 </goals> 329 </execution> 330 </executions> 331 </plugin> 332 <plugin> 333 <groupId>org.apache.maven.plugins</groupId> 334 <artifactId>maven-source-plugin</artifactId> 335 <executions> 336 <execution> 337 <id>attach-sources</id> 338 <phase>package</phase> 339 <goals> 340 <goal>jar</goal> 341 </goals> 342 </execution> 343 </executions> 344 </plugin> 345 <plugin> 346 <groupId>org.apache.maven.plugins</groupId> 347 <artifactId>maven-javadoc-plugin</artifactId> 348 <executions> 349 <execution> 350 <id>attach-javadocs</id> 351 <phase>package</phase> 352 <goals> 353 <goal>jar</goal> 354 </goals> 355 <configuration> 356 <source>1.6</source> 357 <failOnError>false</failOnError> 358 </configuration> 359 </execution> 360 </executions> 361 </plugin> 362 <plugin> 363 <groupId>org.apache.maven.plugins</groupId> 364 <artifactId>maven-site-plugin</artifactId> 365 </plugin> 366 </plugins> 367 </build> 368 <reporting> 369 <plugins> 370 <plugin> 371 <groupId>org.apache.maven.plugins</groupId> 372 <artifactId>maven-project-info-reports-plugin</artifactId> 373 <reportSets> 374 <reportSet> 375 <reports> 376 <report>index</report> 377 <report>summary</report> 378 <report>license</report> 379 <report>scm</report> 380 <report>mailing-list</report> 381 <report>issue-tracking</report> 382 <report>dependencies</report> 383 <report>plugin-management</report> 384 <report>project-team</report> 385 </reports> 386 </reportSet> 387 </reportSets> 388 </plugin> 389 <plugin> 390 <groupId>org.codehaus.mojo</groupId> 391 <artifactId>versions-maven-plugin</artifactId> 392 <reportSets> 393 <reportSet> 394 <reports> 395 <report>dependency-updates-report</report> 396 <report>plugin-updates-report</report> 397 </reports> 398 </reportSet> 399 </reportSets> 400 </plugin> 401 <plugin> 402 <groupId>org.apache.maven.plugins</groupId> 403 <artifactId>maven-jxr-plugin</artifactId> 404 </plugin> 405 <plugin> 406 <groupId>org.apache.maven.plugins</groupId> 407 <artifactId>maven-surefire-report-plugin</artifactId> 408 <reportSets> 409 <reportSet> 410 <reports> 411 <report>report-only</report> 412 <report>failsafe-report-only</report> 413 </reports> 414 </reportSet> 415 </reportSets> 416 </plugin> 417 <plugin> 418 <groupId>org.jacoco</groupId> 419 <artifactId>jacoco-maven-plugin</artifactId> 420 <reportSets> 421 <reportSet> 422 <reports> 423 <!-- select non-aggregate reports --> 424 <report>report</report> 425 </reports> 426 </reportSet> 427 </reportSets> 428 </plugin> 429 <plugin> 430 <groupId>org.apache.maven.plugins</groupId> 431 <artifactId>maven-pmd-plugin</artifactId> 432 <configuration> 433 <targetJdk>1.5</targetJdk> 434 <linkXref>true</linkXref> 435 <sourceEncoding>utf-8</sourceEncoding> 436 </configuration> 437 </plugin> 438 <plugin> 439 <groupId>org.apache.maven.plugins</groupId> 440 <artifactId>maven-javadoc-plugin</artifactId> 441 <reportSets> 442 <reportSet> 443 <id>default</id> 444 <reports> 445 <report>javadoc</report> 446 </reports> 447 <configuration> 448 <source>1.6</source> 449 <failOnError>false</failOnError> 450 </configuration> 451 </reportSet> 452 </reportSets> 453 </plugin> 454 <plugin> 455 <groupId>org.apache.maven.plugins</groupId> 456 <artifactId>maven-checkstyle-plugin</artifactId> 457 <configuration> 458 <configLocation>src/main/config/checkstyle.xml</configLocation> 459 <headerLocation>src/main/config/checkstyle-header.txt</headerLocation> 460 </configuration> 461 </plugin> 462 <plugin> 463 <groupId>org.codehaus.mojo</groupId> 464 <artifactId>findbugs-maven-plugin</artifactId> 465 </plugin> 466 </plugins> 467 </reporting> 468 <profiles> 469 <profile> 470 <id>sign-artifacts</id> 471 <activation> 472 <property> 473 <name>performRelease</name> 474 <value>true</value> 475 </property> 476 </activation> 477 <build> 478 <plugins> 479 <plugin> 480 <groupId>org.apache.maven.plugins</groupId> 481 <artifactId>maven-gpg-plugin</artifactId> 482 <executions> 483 <execution> 484 <id>sign-artifacts</id> 485 <phase>verify</phase> 486 <goals> 487 <goal>sign</goal> 488 </goals> 489 </execution> 490 </executions> 491 </plugin> 492 </plugins> 493 </build> 494 </profile> 495 </profiles> 496</project> 497