Listing down the various components/libraries ( sjsxp) of a given corretto release

[vijayphub]

Thank you for taking the time to help improve OpenJDK and Corretto 11.

If your request concerns a security vulnerability then please report it by email to [email protected] instead of here.
(You can find more information regarding security issues at https://aws.amazon.com/security/vulnerability-reporting/.)

Otherwise, if your idea concerns OpenJDK 11
and is not specific to Corretto 11
we ask that you propose it to the OpenJDK community.
Depending on your contributor status for OpenJDK,
please use the JDK bug system or
the appropriate mailing list
for the given problem area or update project).

If your proposal is specific to Corretto 11,
then you are in the right place.
Please proceed with the following.

Is your feature request related to a problem?

Please provide a clear and concise description of what the problem is.

Describe a solution you would like

Please provide a clear and concise description of what you want to happen.

Describe alternatives you have considered

Please provide a clear and concise description
of any alternative solutions or features you have considered.

Additional context

Add any other context or screenshots about the feature request here.

[caojoshua]

Can you be more specific on what information you are looking for where you would like to see this information listed out?

[vijayphub]

Hi Joshua Thanks for your response One of our security tools reported an unversioned tag for sjsxp, post scan of our enterprise web application. I could not figure out the *version of sjsxp library *from the local installation of amazon-corretto 11.0.21. in my local system I did try to figure out from the documentation but in vain. Could you please let me know the version of sjsxp lib in Amazon-corretto 11.0.21 Best regards Vijayanand Best Regards Vijayanand - 9901339407

…

On Sat, Dec 16, 2023 at 1:57 AM Joshua Cao ***@***.***> wrote: Can you be more specific on what information you are looking for where you would like to see this information listed out? — Reply to this email directly, view it on GitHub <#354 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/A5LO7XYEXTO6CHP4DSB2JJ3YJSXDVAVCNFSM6AAAAABAJMDX3CVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNJYGQ2DQMRQG4> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[caojoshua]

I have never heard of sjsxp. I do not think we are shipping it together with Corretto. It looks like an external library, here is the maven package.

Can you share more about your security tool? Where is it finding sjsxp? Do you have a sjsxp.jar in your Corretto installation directory?