From d9b3257e33da272370a625efcedfd7e46f003a53 Mon Sep 17 00:00:00 2001
From: exceptionfactory <exceptionfactory@apache.org>
Date: Thu, 25 Aug 2022 10:50:15 -0500
Subject: [PATCH] NIFI-10395 Added Apache Xalan to banned dependencies

---
 pom.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pom.xml b/pom.xml
index a9f3a9de52..b560c7fc7c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -859,6 +859,8 @@
                                         <exclude>org.apache.logging.log4j:log4j-core:*</exclude>
                                         <!-- Commons Logging excluded in favor of jcl-over-slf4j -->
                                         <exclude>commons-logging:commons-logging:*</exclude>
+                                        <!-- Apache Xalan is no longer maintained and is bundled in the standard JRE -->
+                                        <exclude>xalan:xalan</exclude>
                                     </excludes>
                                     <includes>
                                         <!-- Versions of JSR305 after 3.0.1 are allowed https://github.com/findbugsproject/findbugs/issues/128 -->