Update Jettison, adjust scope, and fix test configuration - Jersey 2.x This PR updates Jettison usage and related build configuration to address security issues. Includes fix to resolve Jettison import issue after change of scope. Jersey 2.x branch. Changes uplift org.codehaus.jettison:jettison from 1.3.7 → 1.5.2 to resolve the following CVEs: CVE-2022-40149 CVE-2022-40150 CVE-2022-45685 CVE-2022-45693 CVE-2023-1436 Set Jettison to provided scope to avoid bundling it into artifacts and prevent inclusion of vulnerable versions. Commented out bookmark, bookmark-em, and simple-console from the examples build. These modules import org.codehaus.jettison.json classes directly, which are no longer available at compile time after changing Jettison to provided scope. Add Jettison with test scope in e2e-entity to fix test compilation. Correct pre-existing Surefire config typo: <classpathDependencyExcludes> → <classpathDependencyExclude>.
Jersey is a REST framework that provides JAX-RS Reference Implementation and more. Jersey provides its own APIs that extend the JAX-RS toolkit with additional features and utilities to further simplify RESTful service and client development. Jersey also exposes numerous extension SPIs so that developers may extend Jersey to best suit their needs.
Goals of Jersey project can be summarized in the following points:
Jersey is licensed under a dual license - EPL 2.0 and GPL 2.0 with Class-path Exception. That means you can choose which one of the two suits your needs better and use it under those terms.
We use contribution policy, which means we can only accept contributions under the terms of ECA.
See the Jersey website to access Jersey documentation. If you run into any issues or have questions, ask at jersey-dev@eclipse.org (need to subscribe first), StackOverflow or file an issue on Jersey GitHub Project. You can follow us on Twitter, too.