# Can org.apache.httpcomponents.httpclient\_4.5.1.jar be replaced with org.apache.httpcomponents.httpclient\_4.5.13.jar and the .classpath be modified?

**URL:** <https://forum.katalon.com/t/can-org-apache-httpcomponents-httpclient-4-5-1-jar-be-replaced-with-org-apache-httpcomponents-httpclient-4-5-13-jar-and-the-classpath-be-modified/67755>\
**Category:** Web Testing\
**Tags:** katalon-studio\
**Created:** [August 8, 2022, 3:04pm UTC](https://forum.katalon.com/t/can-org-apache-httpcomponents-httpclient-4-5-1-jar-be-replaced-with-org-apache-httpcomponents-httpclient-4-5-13-jar-and-the-classpath-be-modified/67755 "2022-08-08T15:04:42Z")\
**Posts on this page:** 1\
**Showing post:** 10

<div class="post-metadata">

**Author:** ![kazurayam](https://dub1.discourse-cdn.com/katalon/user_avatar/forum.katalon.com/kazurayam/32/333_2.png) [@kazurayam](https://forum.katalon.com/u/kazurayam)\
**Post date:** [August 10, 2022, 2:03pm UTC](https://forum.katalon.com/t/can-org-apache-httpcomponents-httpclient-4-5-1-jar-be-replaced-with-org-apache-httpcomponents-httpclient-4-5-13-jar-and-the-classpath-be-modified/67755/10 "2022-08-10T14:03:44Z")

</div>

> [@gdearest07](#):
>
> What is your opinion on this [API/Web Service Encoded Variables - #5 by gdearest07](http://forum.katalon.com/t/api-web-service-encoded-variables/67658/5)  
> " [gdearest07](http://forum.katalon.com/u/gdearest07)

I personally would never store any serious credential information in a project (= Git repository) regardless encripted or not. It is too scarely for me to save serious credentails in a Git repository, which should be open and shared, even if encripted.

I personally store credentails (URL hostname + username/password) in my local Mac’s Keychain.  
 ![](https://help.apple.com/assets/615642ECF3D4C61D4B04CB81/615642EEF3D4C61D4B04CB88/ja_JP/89cb0ce060eea823d93714c287a7c268.png).

My selenium test scripts reads the Keychain database via Command Line Interface = [security](https://ss64.com/osx/security.html) command of Mac. A working sample code is here:

> <https://github.com/kazurayam/subprocessj/blob/master/src/test/java/example/KeyChainExample.java>

However, you should re-think if the password you have in your mind is REALLY serious one that must be strongly protected. Does it cost much money for you if the password is exposed public? In many cases, username/password pairs used for UI testing are not really worth hard-to-break security efforts; they may be just data.

---

_[View the full topic](https://forum.katalon.com/t/can-org-apache-httpcomponents-httpclient-4-5-1-jar-be-replaced-with-org-apache-httpcomponents-httpclient-4-5-13-jar-and-the-classpath-be-modified/67755)._