-
Couldn't load subscription status.
- Fork 370
Description
After the latest release 2.2.1.1, our project is throwing an exception when it comes to a part where it's supposed to run some code written using encoder-esapi library.
The exception is:
Caused by: org.owasp.esapi.errors.ConfigurationException: java.lang.ClassNotFoundException: org.owasp.esapi.reference.Log4JLogFactory LogFactory class (org.owasp.esapi.reference.Log4JLogFactory) must be in class path.
After investigation, I found that new release 2.2.1.1 has Log4JLogFactory class in whole another package: org.owasp.esapi.logging.log4j.
It looks to me as certain changes have been introduced with this 2.2.1.1 release, and encoder-esapi 1.2 is not aware of them, which makes it to crash.
The reason is because in encoder-esapi's pom file states this dependency:
<dependency>
<groupId>org.owasp.esapi</groupId>
<artifactId>esapi</artifactId>
<version>[2.0,3)</version>
</dependency>
which makes it to download latest one of 2.* major release.