Update log4j because of the CVE-2021-44228 security flaw

1 files changed, 3 insertions, 3 deletions

diff --git a/src/main/java/edu/kit/scc/dei/ecplean/ECPAuthenticatorBase.java b/src/main/java/edu/kit/scc/dei/ecplean/ECPAuthenticatorBase.java
index c35c6fe..b6a4c01 100644
--- a/src/main/java/edu/kit/scc/dei/ecplean/ECPAuthenticatorBase.java
+++ b/src/main/java/edu/kit/scc/dei/ecplean/ECPAuthenticatorBase.java
@@ -21,8 +21,6 @@ import javax.xml.xpath.XPathException;
 import javax.xml.xpath.XPathExpression;

 import javax.xml.xpath.XPathFactory;

 

-import org.apache.commons.logging.Log;

-import org.apache.commons.logging.LogFactory;

 import org.apache.http.HttpResponse;

 import org.apache.http.HttpStatus;

 import org.apache.http.auth.AuthenticationException;

@@ -33,6 +31,8 @@ import org.apache.http.impl.auth.BasicScheme;
 import org.apache.http.impl.client.CloseableHttpClient;

 import org.apache.http.impl.client.HttpClients;

 import org.apache.http.util.EntityUtils;

+import org.apache.logging.log4j.LogManager;

+import org.apache.logging.log4j.Logger;

 import org.w3c.dom.Document;

 import org.xml.sax.EntityResolver;

 import org.xml.sax.InputSource;

@@ -40,7 +40,7 @@ import org.xml.sax.SAXException;
 

 public abstract class ECPAuthenticatorBase extends Observable {

 

-	protected static Log logger = LogFactory.getLog(ECPAuthenticatorBase.class);

+	protected static Logger logger = LogManager.getLogger(ECPAuthenticatorBase.class);

 	

 	protected ECPAuthenticationInfo authInfo;

 	protected CloseableHttpClient client;