René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Appium 8 Dependency Issues and com.browserstack 1.0.x CVE-2020-15250 Vulnerability Mitigation ","articleBody":"The projects I am working on run fine on appium 7x with their current configurations. Initially I simply attempted to update the appium POM dependencies to 8.x and received an Error:  \r\n\r\n[ERROR]  cannot access org.openqa.selenium.Rotatable: class file for org.openqa.selenium.Rotatable not found\r\n\r\nI then created a new project based on the github cucumber skeleton project using the following dependencies:\r\nAdditionally, I did not include the com.browserstack dependency in your project due to the vulnerability listed in the title. however, the prior project mentioned above does not implement it and has no issues running (though it too has the vulnerability and needs to be upgraded as well). \r\nIn fact, the issue with selenium / appium will also break cucumber execution entirely. \r\nFinally, the driver code I am using is the same as the code you provided in your project:\r\n\t\tDesiredCapabilities caps = new DesiredCapabilities();\r\n\t\tHashMap\u003cString, Object\u003e browserstackOptions = new HashMap\u003cString, Object\u003e();\r\n\t    // Set your access credentials\r\n\t    browserstackOptions.put(\"userName\",user);\r\n\t    browserstackOptions.put(\"accessKey\",key);\r\n\r\n\t    // Set other BrowserStack capabilities\r\n\t    browserstackOptions.put(\"appiumVersion\", \"1.22.0\");\r\n\t    browserstackOptions.put(\"projectName\", \"First Java Project\");\r\n\t    browserstackOptions.put(\"buildName\", \"browserstack-build-1\");\r\n\t    browserstackOptions.put(\"sessionName\", \"first_test\");\r\n\r\n\t    // Passing browserstack capabilities inside bstack:options\r\n\t    caps.setCapability(\"bstack:options\", browserstackOptions);\r\n\r\n\r\n\t    // Set URL of the application under test\r\n\t    caps.setCapability(\"app\", \"bs://\u003cappid\u003e\");//the actual app ID was provided here but has been redacted\r\n\r\n\t    // Specify deviceName and platformName for testing\r\n\t    caps.setCapability(\"deviceName\", \"Samsung Galaxy S22 Ultra\");\r\n\t    caps.setCapability(\"platformName\", \"android\");\r\n\t    caps.setCapability(\"platformVersion\", \"12.0\");\r\n\r\n\t    String baseUrl = \"http://hub.browserstack.com/wd/hub\";\r\n\t\treturn new AndroidDriver(new URL(baseUrl), caps);\r\n\r\n\r\n    \u003cdependencyManagement\u003e\r\n        \u003cdependencies\u003e\r\n            \u003cdependency\u003e\r\n                \u003cgroupId\u003eorg.junit\u003c/groupId\u003e\r\n                \u003cartifactId\u003ejunit-bom\u003c/artifactId\u003e\r\n                \u003cversion\u003e5.9.1\u003c/version\u003e\r\n                \u003ctype\u003epom\u003c/type\u003e\r\n                \u003cscope\u003eimport\u003c/scope\u003e\r\n            \u003c/dependency\u003e\r\n            \u003cdependency\u003e\r\n                \u003cgroupId\u003eio.cucumber\u003c/groupId\u003e\r\n                \u003cartifactId\u003ecucumber-bom\u003c/artifactId\u003e\r\n                \u003cversion\u003e7.8.1\u003c/version\u003e\r\n                \u003ctype\u003epom\u003c/type\u003e\r\n                \u003cscope\u003eimport\u003c/scope\u003e\r\n            \u003c/dependency\u003e\r\n            \u003cdependency\u003e\r\n\t\t\t    \u003cgroupId\u003ecom.azure\u003c/groupId\u003e\r\n    \t\t\t\u003cartifactId\u003eazure-core\u003c/artifactId\u003e\r\n    \t\t\t\u003cversion\u003e1.34.0\u003c/version\u003e\r\n\t\t\t\u003c/dependency\u003e\r\n        \u003c/dependencies\u003e\r\n    \u003c/dependencyManagement\u003e\r\n  \u003cdependencies\u003e\r\n          \u003cdependency\u003e\r\n            \u003cgroupId\u003eorg.junit.platform\u003c/groupId\u003e\r\n            \u003cartifactId\u003ejunit-platform-suite\u003c/artifactId\u003e\r\n            \u003cscope\u003etest\u003c/scope\u003e\r\n        \u003c/dependency\u003e\r\n        \u003cdependency\u003e\r\n            \u003cgroupId\u003eorg.junit.jupiter\u003c/groupId\u003e\r\n            \u003cartifactId\u003ejunit-jupiter\u003c/artifactId\u003e\r\n            \u003cscope\u003etest\u003c/scope\u003e\r\n        \u003c/dependency\u003e\r\n\t\u003cdependency\u003e\r\n    \t\t\u003cgroupId\u003eio.cucumber\u003c/groupId\u003e\r\n    \t\t\u003cartifactId\u003ecucumber-testng\u003c/artifactId\u003e\r\n    \t\t\u003cversion\u003e7.8.1\u003c/version\u003e\r\n\t\t\u003c/dependency\u003e\r\n        \u003cdependency\u003e\r\n            \u003cgroupId\u003eio.cucumber\u003c/groupId\u003e\r\n            \u003cartifactId\u003ecucumber-java\u003c/artifactId\u003e\r\n            \u003cscope\u003etest\u003c/scope\u003e\r\n        \u003c/dependency\u003e\r\n        \u003cdependency\u003e\r\n            \u003cgroupId\u003eio.cucumber\u003c/groupId\u003e\r\n            \u003cartifactId\u003ecucumber-junit-platform-engine\u003c/artifactId\u003e\r\n            \u003c!--\u003cversion\u003e7.8.1\u003c/version\u003e--\u003e\r\n            \u003cscope\u003etest\u003c/scope\u003e\r\n        \u003c/dependency\u003e\r\n        \t\t\u003cdependency\u003e\r\n    \t\t\u003cgroupId\u003eio.cucumber\u003c/groupId\u003e\r\n    \t\t\u003cartifactId\u003ecucumber-testng\u003c/artifactId\u003e\r\n    \t\t\u003cversion\u003e7.8.1\u003c/version\u003e\r\n\t\t\u003c/dependency\u003e\r\n        \u003cdependency\u003e\r\n    \t\t\u003cgroupId\u003eio.netty\u003c/groupId\u003e\r\n    \t\t\u003cartifactId\u003enetty-handler\u003c/artifactId\u003e\r\n    \t\t\u003cversion\u003e4.1.69.Final\u003c/version\u003e\r\n\t\t\u003c/dependency\u003e\r\n        \u003cdependency\u003e\r\n      \t\t\u003cgroupId\u003eorg.testng\u003c/groupId\u003e\r\n      \t\t\u003cartifactId\u003etestng\u003c/artifactId\u003e\r\n      \t\t\u003cversion\u003e6.9.8\u003c/version\u003e\r\n      \t\t\u003cscope\u003etest\u003c/scope\u003e\r\n    \t\u003c/dependency\u003e\r\n        \u003cdependency\u003e\r\n      \t\t\u003cgroupId\u003eio.appium\u003c/groupId\u003e\r\n      \t\t\u003cartifactId\u003ejava-client\u003c/artifactId\u003e\r\n      \t\t\u003cversion\u003e8.0.0\u003c/version\u003e\r\n    \t\u003c/dependency\u003e\r\n    \t\u003cdependency\u003e\r\n      \t\t\u003cgroupId\u003ecom.konghq\u003c/groupId\u003e\r\n      \t\t\u003cartifactId\u003eunirest-java\u003c/artifactId\u003e\r\n      \t\t\u003cversion\u003e4.0.0-RC2\u003c/version\u003e\r\n    \t\u003c/dependency\u003e\r\n\u003c!-- https://mvnrepository.com/artifact/com.konghq/unirest-object-mappers-gson --\u003e\r\n\t\t\u003cdependency\u003e\r\n\t\t    \u003cgroupId\u003ecom.konghq\u003c/groupId\u003e\r\n\t    \t\u003cartifactId\u003eunirest-object-mappers-gson\u003c/artifactId\u003e\r\n\t    \t\u003cversion\u003e4.0.0-RC6\u003c/version\u003e\r\n\t    \u003c/dependency\u003e\r\n\u003c!-- Jackson --\u003e\r\n\t\t\u003cdependency\u003e\r\n    \t\t\u003cgroupId\u003ecom.konghq\u003c/groupId\u003e\r\n    \t\t\u003cartifactId\u003eunirest-objectmapper-jackson\u003c/artifactId\u003e\r\n    \t\t\u003cversion\u003e4.0.0-RC6\u003c/version\u003e\r\n\t\t\u003c/dependency\u003e\r\n  \u003c/dependencies\u003e\r\n\r\n\r\n\r\n**Stack Error is as follows:**\r\n\r\n[java file location and name redacted] cannot access org.openqa.selenium.Rotatable class file for org.openqa.selenium.Rotatable not found\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:375)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:351)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:215)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:171)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:163)\r\n    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)\r\n    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)\r\n    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)\r\n    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)\r\n    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:294)\r\n    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)\r\n    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)\r\n    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:960)\r\n    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)\r\n    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)\r\n    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)\r\n    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:77)\r\n    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)\r\n    at java.lang.reflect.Method.invoke (Method.java:568)\r\n    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)\r\n    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)\r\n    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)\r\n    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)\r\nCaused by: org.apache.maven.plugin.compiler.CompilationFailureException: Compilation failure\r\n[java file location and name redacted] cannot access org.openqa.selenium.Rotatable\r\n  class file for org.openqa.selenium.Rotatable not found\r\n\r\n    at org.apache.maven.plugin.compiler.AbstractCompilerMojo.execute (AbstractCompilerMojo.java:1310)\r\n    at org.apache.maven.plugin.compiler.TestCompilerMojo.execute (TestCompilerMojo.java:183)\r\n    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:137)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:370)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:351)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:215)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:171)\r\n    at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:163)\r\n    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:117)\r\n    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:81)\r\n    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:56)\r\n    at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:128)\r\n    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:294)\r\n    at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:192)\r\n    at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:105)\r\n    at org.apache.maven.cli.MavenCli.execute (MavenCli.java:960)\r\n    at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:293)\r\n    at org.apache.maven.cli.MavenCli.main (MavenCli.java:196)\r\n    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)\r\n    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:77)\r\n    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)\r\n    at java.lang.reflect.Method.invoke (Method.java:568)\r\n    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282)\r\n    at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225)\r\n    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406)\r\n    at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)","author":{"url":"https://github.com/ghsm4-db-mb-auto-dvps","@type":"Person","name":"ghsm4-db-mb-auto-dvps"},"datePublished":"2023-03-03T16:38:01.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/29/java-appium-app-browserstack/issues/29"}