ban log4j and javax.servlet dependencies (#611)

Author: fbruton

pom.xml

@@ -770,6 +770,15 @@
               </goals>
               <configuration>
                 <rules>
+                  <bannedDependencies>
+                    <excludes>
+                      <exclude>ch.qos.logback:*:(,1.2.9)</exclude>
+                      <exclude>log4j</exclude>
+                      <exclude>org.apache.logging.log4j:*:(,2.17.1)</exclude>
+                      <exclude>javax.servlet</exclude>
+                    </excludes>
+                    <searchTransitive>true</searchTransitive>
+                  </bannedDependencies>
                   <requireMavenVersion>
                     <version>[${maven.min-version},)</version>
                   </requireMavenVersion>