OWASP/owasp-java-encoder

All-in-one version with shaded guava

cnsgithub opened this issue · 1 comments

Hi,

I'd like to use owasp-java-encoder in PrimeFaces (a popular JSF component suite). However, because of very restrictive policies regarding the use of third-party policies my PR cannot be merged.

The problem is the dependency to guava, which is a really big one that is also widely used and therefore version conflicts are conceivable.

So I come to the question if it would be possible for you to provide an additional all-in-one version of owasp-java-encoder having the guava dependency shaded?

Please see primefaces/primefaces#3214 for the reasons why my PR was reverted.

Thanks.

Sorry, wrong project, meant owasp-java-html-sanitizer... See OWASP/java-html-sanitizer#157