noup, because FindBugs requires ```import org.apache.commons.lang.StringEscapeUtils``` and not an ```import org.apache.commons.lang3.StringEscapeUtils```
So, we have to stick on 2.6