NIFI-10395 Add Apache Xalan to banned dependencies

[exceptionfactory]

Summary

NIFI-10395 Adds Apache Xalan to the list of banned dependencies. The last version 2.7.2 was released in April 2014 and CVE-2022-34169 highlights the fact that the project is dormant, with no future releases expected. The dependency is not currently used and should not be necessary as standard Java distributions include a repackaged version.

Tracking

Please complete the following tracking steps prior to pull request creation.

Issue Tracking

• Apache NiFi Jira issue created

Pull Request Tracking

• Pull Request title starts with Apache NiFi Jira issue number, such as NIFI-00000
• Pull Request commit message starts with Apache NiFi Jira issue number, as such NIFI-00000

Pull Request Formatting

• Pull Request based on current revision of the main branch
• Pull Request refers to a feature branch with one commit containing changes

Verification

Please indicate the verification steps performed prior to pull request creation.

Build

• Build completed using mvn clean install -P contrib-check
  • JDK 8
  • JDK 11
  • JDK 17

Licensing

• New dependencies are compatible with the Apache License 2.0 according to the License Policy
• New dependencies are documented in applicable LICENSE and NOTICE files

Documentation

• Documentation formatting appears as expected in rendered files

[arpadboda]

LGTM