Fix CVE caused by jetty-http introduced in spark-core

Signed-off-by: Zan Niu <[email protected]>
opensearch-project · Jan 31, 2025 · a4098a1 · a4098a1
1 parent 05af07b
commit a4098a1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -224,7 +224,8 @@ task addSparkJar(type: Copy) {
         }
         // Remove the unwanted directory from jar B
         delete file("${jarBContents}/org/apache/spark/unused")
-
+        delete file("${jarBContents}/org/sparkproject/jetty/http")
+        delete file("${jarBContents}/META-INF/maven/org.eclipse.jetty/jetty-http")
         // Re-compress jar B
         ant.zip(destfile: jarB, baseDir: jarBContents)