ASHTMLSerializer uses deprecated HTMLSerializer. Replace with TrAX.

[davewichers]

ASHTMLSerializer extends org.apache.xml.serialize.HTMLSerializer, which is deprecated.

"Deprecated. This class was deprecated in Xerces 2.6.2. It is recommended that new applications use JAXP's Transformation API for XML (TrAX) for serializing HTML. See the Xerces documentation for more information."

AntiSamyDOMScanner.java also has a couple of offending lines (As does AntiSamySAXScanner):

      @SuppressWarnings("deprecation")
      org.apache.xml.serialize.OutputFormat format = getOutputFormat();

      //noinspection deprecation
      org.apache.xml.serialize.HTMLSerializer serializer = getHTMLSerializer(out, format);
      serializer.serialize(dom);