This page contains a list of all the libraries involved in building version 19 of the
"DOM XSS Active scanner rule" add-on.
You may download the full Software Bill Of Materials (SBOM) JSON file for this add-on.
| Name | Version | License(s) |
|---|---|---|
| aopalliance | 1.0 | Public Domain |
| apiguardian-api | 1.1.2 | Apache-2.0 |
| asm | 9.5 | BSD-3-Clause |
| asm-commons | 9.5 | BSD-3-Clause |
| asm-tree | 9.5 | BSD-3-Clause |
| auto-common | 1.2.2 | Apache-2.0 |
| auto-service-annotations | 1.0.1 | Apache-2.0 |
| auto-service-annotations | 1.1.1 | Apache-2.0 |
| auto-value-annotations | 1.9 | Apache-2.0 |
| bcmail-jdk18on | 1.77 | Bouncy Castle Licence |
| bcpkix-jdk18on | 1.77 | Bouncy Castle Licence |
| bcprov-jdk18on | 1.77 | Bouncy Castle Licence |
| bcutil-jdk18on | 1.77 | Bouncy Castle Licence |
| brotli4j | 1.16.0 | Apache-2.0 |
| byte-buddy | 1.14.14 | Apache-2.0 |
| byte-buddy-agent | 1.14.9 | Apache-2.0 |
| caffeine | 3.0.5 | Apache-2.0 |
| checker-qual | 3.33.0 | MIT |
| checker-qual | 3.42.0 | MIT |
| commonlib | 1.25.0 | |
| commons-beanutils | 1.9.4 | Apache-2.0 |
| commons-codec | 1.16.1 | Apache-2.0 |
| commons-collections | 3.2.2 | Apache-2.0 |
| commons-collections4 | 4.4 | Apache-2.0 |
| commons-compress | 1.26.0 | Apache-2.0 |
| commons-configuration | 1.10 | Apache-2.0 |
| commons-csv | 1.10.0 | Apache-2.0 |
| commons-exec | 1.4.0 | Apache-2.0 |
| commons-httpclient | 3.1 | Apache-1.0 |
| commons-io | 2.16.1 | Apache-2.0 |
| commons-lang | 2.6 | Apache-2.0 |
| commons-lang3 | 3.14.0 | Apache-2.0 |
| commons-logging | 1.3.1 | Apache-2.0 |
| commons-net | 3.10.0 | Apache-2.0 |
| commons-text | 1.11.0 | Apache-2.0 |
| commons-text | 1.12.0 | Apache-2.0 |
| dataflow-errorprone | 3.41.0-eisop1 | GNU General Public License, version 2 (GPL2), with the classpath exception |
| dec | 0.1.2 | MIT |
| docker-java | 3.3.5 | Apache-2.0 |
| docker-java-api | 3.3.5 | Apache-2.0 |
| docker-java-core | 3.3.5 | Apache-2.0 |
| docker-java-transport | 3.3.5 | Apache-2.0 |
| docker-java-transport-httpclient5 | 3.3.5 | Apache-2.0 |
| error_prone_annotation | 2.26.1 | Apache-2.0 |
| error_prone_annotations | 2.26.1 | Apache-2.0 |
| error_prone_check_api | 2.26.1 | Apache-2.0 |
| error_prone_core | 2.26.1 | Apache-2.0 |
| error_prone_type_annotations | 2.26.1 | Apache-2.0 |
| ezmorph | 1.0.6 | Apache-2.0 |
| failsafe | 3.3.2 | Apache-2.0 |
| failureaccess | 1.0.1 | Apache-2.0 |
| failureaccess | 1.0.2 | Apache-2.0 |
| flatlaf | 3.4.1 | Apache-2.0 |
| formhandler | 6.6.0 | |
| gson | 2.10.1 | Apache-2.0 |
| guava | 32.1.1-jre | Apache-2.0 |
| guava | 33.1.0-jre | Apache-2.0 |
| guice | 5.1.0 | Apache-2.0 |
| hamcrest | 2.2 | BSD-3-Clause |
| hamcrest-core | 2.2 | BSD-3-Clause |
| hamcrest-library | 2.2 | BSD-3-Clause |
| harlib | 1.1.3 | Apache-2.0 |
| hsqldb | 2.7.2 | HSQLDB License, a BSD open source license |
| htmlunit | 4.0.0 | Apache-2.0 |
| htmlunit-core-js | 4.0.0 | Apache-2.0 |
| htmlunit-csp | 4.0.0 | Apache-2.0 |
| htmlunit-cssparser | 4.0.0 | Apache-2.0 |
| htmlunit-websocket-client | 4.0.0 | Apache-2.0 |
| htmlunit-xpath | 4.0.0 | Apache-2.0 |
| htmlunit3-driver | 4.19.1 | Apache-2.0 |
| httpclient | 4.5.14 | Apache-2.0 |
| httpclient5 | 5.2.1 | Apache-2.0 |
| httpcore | 4.4.16 | Apache-2.0 |
| httpcore5 | 5.2 | Apache-2.0 |
| httpcore5-h2 | 5.2 | Apache-2.0 |
| httpmime | 4.5.14 | Apache-2.0 |
| ice4j | 3.0-24-g34c2ce5 | Apache-2.0 |
| j2objc-annotations | 3.0.0 | Apache-2.0 |
| jackson-annotations | 2.17.0 | Apache-2.0 |
| jackson-core | 2.17.0 | Apache-2.0 |
| jackson-core-asl | 1.9.13 | Apache-2.0 |
| jackson-databind | 2.17.0 | Apache-2.0 |
| jackson-dataformat-xml | 2.17.0 | Apache-2.0 |
| jackson-dataformat-yaml | 2.17.0 | Apache-2.0 |
| jackson-datatype-jdk8 | 2.17.0 | Apache-2.0 |
| java-diff-utils | 4.12 | Apache-2.0 |
| java-semver | 0.10.2 | MIT |
| javac | 9+181-r4173-1 | GPL-2.0-with-classpath-exception |
| javahelp | 2.0.05 | GNU General Public License - Version 2 with the class path exception |
| javax.inject | 1 | Apache-2.0 |
| jcl-over-slf4j | 1.7.30 | Apache-2.0 |
| jericho-html | 3.4 | GNU Lesser General Public License (LGPL), Apache-1.0, EPL-1.0 |
| jfreechart | 1.5.4 | GNU Lesser General Public Licence |
| jgrapht-core | 0.9.0 | LGPL-2.1-only, EPL-1.0 |
| jna | 5.13.0 | LGPL-2.1-or-later, Apache-2.0 |
| json-lib | 2.4 | Apache-2.0 |
| jsr305 | 3.0.2 | Apache-2.0 |
| junit-jupiter | 5.10.1 | EPL-2.0 |
| junit-jupiter-api | 5.10.1 | EPL-2.0 |
| junit-jupiter-engine | 5.10.1 | EPL-2.0 |
| junit-jupiter-params | 5.10.1 | EPL-2.0 |
| junit-platform-commons | 1.10.1 | EPL-2.0 |
| junit-platform-engine | 1.10.1 | EPL-2.0 |
| junit-platform-launcher | 1.10.1 | EPL-2.0 |
| listenablefuture | 9999.0-empty-to-avoid-conflict-with-guava | Apache-2.0 |
| log4j-1.2-api | 2.20.0 | Apache-2.0 |
| log4j-api | 2.20.0 | Apache-2.0 |
| log4j-core | 2.20.0 | Apache-2.0 |
| log4j-jul | 2.20.0 | Apache-2.0 |
| log4j-slf4j-impl | 2.20.0 | Apache-2.0 |
| mockito-core | 5.7.0 | MIT |
| mockito-junit-jupiter | 5.7.0 | MIT |
| nanohttpd | 2.3.1 | BSD-3-Clause |
| nanohttpd-webserver | 2.3.1 | BSD-3-Clause |
| nanohttpd-websocket | 2.3.1 | BSD-3-Clause |
| native-linux-x86_64 | 1.16.0 | Apache-2.0 |
| native-osx-aarch64 | 1.16.0 | Apache-2.0 |
| native-osx-x86_64 | 1.16.0 | Apache-2.0 |
| native-windows-x86_64 | 1.16.0 | Apache-2.0 |
| neko-htmlunit | 4.0.0 | Apache-2.0 |
| netty-buffer | 4.1.100.Final | Apache-2.0 |
| netty-codec | 4.1.100.Final | Apache-2.0 |
| netty-codec-http | 4.1.100.Final | Apache-2.0 |
| netty-codec-http2 | 4.1.100.Final | Apache-2.0 |
| netty-common | 4.1.100.Final | Apache-2.0 |
| netty-handler | 4.1.100.Final | Apache-2.0 |
| netty-resolver | 4.1.100.Final | Apache-2.0 |
| netty-transport | 4.1.100.Final | Apache-2.0 |
| netty-transport-native-unix-common | 4.1.100.Final | Apache-2.0 |
| network | 0.16.0 | |
| objenesis | 3.3 | Apache-2.0 |
| opentelemetry-api | 1.37.0 | Apache-2.0 |
| opentelemetry-api-incubator | 1.37.0-alpha | Apache-2.0 |
| opentelemetry-context | 1.37.0 | Apache-2.0 |
| opentelemetry-exporter-logging | 1.37.0 | Apache-2.0 |
| opentelemetry-sdk | 1.37.0 | Apache-2.0 |
| opentelemetry-sdk-common | 1.37.0 | Apache-2.0 |
| opentelemetry-sdk-extension-autoconfigure | 1.37.0 | Apache-2.0 |
| opentelemetry-sdk-extension-autoconfigure-spi | 1.37.0 | Apache-2.0 |
| opentelemetry-sdk-logs | 1.37.0 | Apache-2.0 |
| opentelemetry-sdk-metrics | 1.37.0 | Apache-2.0 |
| opentelemetry-sdk-trace | 1.37.0 | Apache-2.0 |
| opentelemetry-semconv | 1.25.0-alpha | Apache-2.0 |
| opentest4j | 1.3.0 | Apache-2.0 |
| org.jacoco.agent | 0.8.9 | EPL-2.0 |
| org.jacoco.ant | 0.8.9 | EPL-2.0 |
| org.jacoco.core | 0.8.9 | EPL-2.0 |
| org.jacoco.report | 0.8.9 | EPL-2.0 |
| pcollections | 4.0.1 | MIT |
| protobuf-java | 3.19.6 | BSD-3-Clause |
| rsyntaxtextarea | 3.4.0 | BSD-3-Clause |
| selenium | 15.23.0 | |
| selenium-api | 4.20.0 | Apache-2.0 |
| selenium-chrome-driver | 4.20.0 | Apache-2.0 |
| selenium-chromium-driver | 4.20.0 | Apache-2.0 |
| selenium-devtools-v122 | 4.20.0 | Apache-2.0 |
| selenium-devtools-v123 | 4.20.0 | Apache-2.0 |
| selenium-devtools-v124 | 4.20.0 | Apache-2.0 |
| selenium-devtools-v85 | 4.20.0 | Apache-2.0 |
| selenium-edge-driver | 4.20.0 | Apache-2.0 |
| selenium-firefox-driver | 4.20.0 | Apache-2.0 |
| selenium-http | 4.20.0 | Apache-2.0 |
| selenium-ie-driver | 4.20.0 | Apache-2.0 |
| selenium-java | 4.20.0 | Apache-2.0 |
| selenium-json | 4.20.0 | Apache-2.0 |
| selenium-manager | 4.20.0 | Apache-2.0 |
| selenium-os | 4.20.0 | Apache-2.0 |
| selenium-remote-driver | 4.20.0 | Apache-2.0 |
| selenium-safari-driver | 4.20.0 | Apache-2.0 |
| selenium-support | 4.20.0 | Apache-2.0 |
| service | 1.16.0 | Apache-2.0 |
| slf4j-api | 1.7.36 | MIT |
| slf4j-api | 2.0.12 | MIT |
| snakeyaml | 2.2 | Apache-2.0 |
| software-and-algorithms | 1.0 | MIT |
| stax2-api | 4.2.2 | BSD-2-Clause |
| swingx-all | 1.6.5-1 | Lesser General Public License (LGPL) |
| testutils | unspecified | |
| webdrivermanager | 5.7.0 | Apache-2.0 |
| woodstox-core | 6.6.1 | Apache-2.0 |
| xom | 1.3.9 | The GNU Lesser General Public License, Version 2.1 |
| zap | 2.15.0-SNAPSHOT | Apache-2.0 |