Merge pull request #533 from woodfighter/master

update dependencies to remove known security flaws in dependencies of grobid-service

build.gradle

@@ -212,28 +212,32 @@ project("grobid-core") {
 
         compile group: 'org.slf4j', name: 'slf4j-api', version: '1.7.25'
         compile "com.cybozu.labs:langdetect:1.1-20120112"
-        compile "com.rockymadden.stringmetric:stringmetric-core_2.10:0.27.3"
+        compile "com.rockymadden.stringmetric:stringmetric-core_2.11:0.27.4"
         compile "commons-pool:commons-pool:1.6"
         compile "commons-io:commons-io:2.5"
         compile "org.apache.commons:commons-lang3:3.6"
         compile "org.apache.commons:commons-collections4:4.1"
         compile "commons-dbutils:commons-dbutils:1.7"
         compile "org.apache.httpcomponents:httpclient:4.5.3"
-        compile "xerces:xercesImpl:2.11.0"
-        compile "com.google.guava:guava:19.0"
+        compile "xerces:xercesImpl:2.12.0"
+        compile "com.google.guava:guava:28.2-jre"
         compile "net.arnx:jsonic:1.3.10"
-        compile "org.apache.pdfbox:pdfbox:2.0.3"
+        compile "org.apache.pdfbox:pdfbox:2.0.18"
         compile "net.sf.saxon:Saxon-HE:9.6.0-9"
-        compile "xom:xom:1.2.5"
-        compile "com.fasterxml.jackson.core:jackson-core:2.9.5"
-        compile "com.fasterxml.jackson.core:jackson-databind:2.9.5"
-        compile "com.fasterxml.jackson.module:jackson-module-afterburner:2.9.5"
+        compile "xom:xom:1.3.2"
+        compile "com.fasterxml.jackson.core:jackson-core:2.10.1"
+        compile "com.fasterxml.jackson.core:jackson-databind:2.10.1"
+        compile "com.fasterxml.jackson.module:jackson-module-afterburner:2.10.1"
         compile "joda-time:joda-time:2.9.9"
         compile "org.apache.lucene:lucene-analyzers-common:4.5.1"
         compile 'javax.xml.bind:jaxb-api:2.3.0'
         compile 'black.ninia:jep:3.8.2'
         compile 'org.slf4j:slf4j-log4j12:1.7.25'
 
+// added because dependencies that pull them in request lower versions
+	compile "org.scala-lang:scala-library:2.+"
+        compile "xalan:xalan:2.+"
+
         shadedLib "org.apache.lucene:lucene-analyzers-common:4.5.1"
 
         runtime group: 'org.slf4j', name: 'slf4j-jdk14', version: '1.7.25'
@@ -322,17 +326,17 @@ project(":grobid-service") {
 
     dependencies {
         compile project(':grobid-core')
-        compile "io.dropwizard:dropwizard-core:1.3.7"
-        compile "io.dropwizard:dropwizard-assets:1.3.7"
+        compile "io.dropwizard:dropwizard-core:1.3.17"
+        compile "io.dropwizard:dropwizard-assets:1.3.17"
         compile "com.hubspot.dropwizard:dropwizard-guicier:1.3.5.0"
-        compile "io.dropwizard:dropwizard-testing:1.3.7"
-        compile "io.dropwizard:dropwizard-forms:1.3.7"
-        compile "io.dropwizard:dropwizard-client:1.3.7"
-        compile "io.dropwizard:dropwizard-auth:1.3.7"
+        compile "io.dropwizard:dropwizard-testing:1.3.17"
+        compile "io.dropwizard:dropwizard-forms:1.3.17"
+        compile "io.dropwizard:dropwizard-client:1.3.17"
+        compile "io.dropwizard:dropwizard-auth:1.3.17"
         compile "org.apache.pdfbox:pdfbox:2.0.3"
         compile "javax.activation:activation:1.1.1"
 
-        testCompile "io.dropwizard:dropwizard-testing:1.3.5"
+        testCompile "io.dropwizard:dropwizard-testing:1.3.17"
     }
 
     distributions {

grobid-service/src/main/resources/web/index.html

@@ -6,7 +6,7 @@
 		<link rel="icon" type="image/x-icon" href="resources/img/favicon.ico"/> 
 		<link rel="shortcut icon" type="image/x-icon" href="resources/img/favicon.ico"/>
 
-		<script type="text/javascript" src="resources/js/jquery-1.10.0.min.js"></script> 
+		<script type="text/javascript" src="resources/js/jquery-3.4.1.min.js"></script> 
         <script type="text/javascript" src="resources/js/jquery.form.js"></script>
         <script type="text/javascript" src="resources/bootstrap/js/bootstrap.min.js"></script>