Considering javax.servlet-api 4.0.1

[kwwall]

When we were preparing for the first ESAPI release to require Java 8 as the minimal JDK, one other thing we considered was at the same time bumping the provided javax.servlet:javax.servlet-api from 3.1.0 to 4.0.1. (The 3.1.0 version was released in April 2013 and it the last in the 3.x series.)

We eventually decided to first ask the community of that whether that move to 4.x might adversely affect them. The 4.0.1 release of javax.servlet-api is from April, 2018, so should certainly have a lot of support for it in terms of JavaEE web / application servers. However, I wanted to be cautious because I did not want to force the ESAPI community to update their JavaEE application server version just because we put out a new release of ESAPI. As a result, we backed out that change for later consideration.

Thus I present this poll for the ESAPI community in order for us to gain feedback. Please answer the poll below and add additional comments as needed! Thanks.