[MDEP-964] Allowlist org.glassfish:javax.json

[jira-importer]

Elliotte Rusty Harold opened MDEP-964 and commented

found this one in our own code:

<dependency>

  <groupId>org.glassfish</groupId>

  <artifactId>javax.json</artifactId>

  <version>1.1.4</version>

  <scope>test</scope>

</dependency> It's typically loaded by reflection so not found by the analyzer. Might want to list it as used iff javax.json-api is used

---

Remote Links:

• GitHub Pull Request #459

[jira-importer]

Michael Osipov commented

Reasonable...