From 061ce30d8db374f53f6ee0304f6acc136efd0e2d Mon Sep 17 00:00:00 2001
From: "Jamin W. Collins" <jamin.collins@gmail.com>
Date: Sat, 16 Oct 2021 21:23:12 -0700
Subject: [PATCH] fix transitive dependency vulnerability

* https://snyk.io/vuln/SNYK-JAVA-COMMONSCODEC-561518

Signed-off-by: Jamin W. Collins <jamin.collins@gmail.com>
---
 forge-gui-android/pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/forge-gui-android/pom.xml b/forge-gui-android/pom.xml
index c24e32083bc..38370d53c06 100644
--- a/forge-gui-android/pom.xml
+++ b/forge-gui-android/pom.xml
@@ -59,6 +59,12 @@
             <artifactId>httpclient</artifactId>
             <version>4.5.13</version>
         </dependency>
+        <!-- declare a specific dependency to override org.apache.httpcomponents's transitive dependency -->
+        <dependency>
+            <groupId>commons-codec</groupId>
+            <artifactId>commons-codec</artifactId>
+            <version>1.15</version>
+        </dependency>
         <dependency>
             <groupId>forge</groupId>
             <artifactId>forge-core</artifactId>