svn propchange: r1759250 - svn:log

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

svn propchange: r1759250 - svn:log

jleroux@apache.org
Author: jleroux
Revision: 1759250
Modified property: svn:log

Modified: svn:log at Mon Sep  5 17:44:23 2016
------------------------------------------------------------------------------
--- svn:log (original)
+++ svn:log Mon Sep  5 17:44:23 2016
@@ -1,9 +1,6 @@
 A slightly modified Taher's patch for "Load the OWASP dependency checker Gradle plugin efficiently" I reported at OFBIZ-7930
 
-As I warned at https://cwiki.apache.org/confluence/display/OFBIZ/About+OWASP+Dependency+Check it's currently difficult to separate the OFBiz jars from other jars in the .gradle\caches contains which may contain jars unrelated to OFBiz. Notably Eclipse jars if you use the Gradle Eclipse task and more if you use Gradle for other reasons than OFBiz.
-I did not find yet a way to avoid to have all external jars in .gradle\caches and I wonder if it's even possible. What I would like to have is the external jars mandatory for OFBiz to work in an isolated place. For instance a sub folder of the main Gradle build folder. I picked $buildDir/externalJars.
-
-Taher:  I have a clean working solution now that does not affect users who do not want the OWASP plugin.
+Using OWASP-DC with Gradle was impossible w/o the corresponding plugin. Unfortunately using the suggested way at https://plugins.gradle.org/plugin/org.owasp.dependencycheck loads a lot of dependencies which are only needed by OWASP-DC. So Taher wrote a specific solution to avoid downloading useless libs to a normal use of OFBiz, there it is.
 
 
 jleroux: I have simply formatted the "if(" to "if ("