Although the esapi code is licensed under a BSD-style license, its content is licensed under CC-BY-SA-3.0, a "ShareAlike" license that has copyleft features.

Let's discuss how this content is being used. Because it applies to the code and not the content, the TSC might approve keeping this in despite the content being under a copyleft-style license.

Advised to remove documentation (content) part if possible. The team indicated they have not found the documentation inside the JAR library they are using.

Impacted components: policy-docker-policy, policy-engine, portal, portal-sdk (2.1.0 and 2.1.0.1), vid (2.1.0 only)