From 76ea06748b28000a4875c28a29c0dbc29bc44138 Mon Sep 17 00:00:00 2001 From: 疯狂的狮子li <15040126243@163.com> Date: 星期一, 13 四月 2020 12:48:03 +0800 Subject: [PATCH] 升级fastjson到最新版1.2.68 修复安全加固 --- ruoyi/pom.xml | 68 +++++++++++++--------------------- 1 files changed, 26 insertions(+), 42 deletions(-) diff --git a/ruoyi/pom.xml b/ruoyi/pom.xml index e8a9fa7..0e8e9c7 100644 --- a/ruoyi/pom.xml +++ b/ruoyi/pom.xml @@ -25,7 +25,7 @@ <java.version>1.8</java.version> <mybatis.spring.boot.starter.version>1.3.2</mybatis.spring.boot.starter.version> <pagehelper.spring.boot.starter.version>1.2.5</pagehelper.spring.boot.starter.version> - <fastjson.version>1.2.47</fastjson.version> + <fastjson.version>1.2.68</fastjson.version> <druid.version>1.1.14</druid.version> <commons.io.version>2.5</commons.io.version> <commons.fileupload.version>1.3.3</commons.fileupload.version> @@ -77,26 +77,22 @@ <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-web</artifactId> </dependency> - <!-- spring-boot-devtools --> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-devtools</artifactId> <optional>true</optional> <!-- 琛ㄧず渚濊禆涓嶄細浼犻�� --> </dependency> - <!-- spring security 瀹夊叏璁よ瘉 --> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId> </dependency> - <!-- redis 缂撳瓨鎿嶄綔 --> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-data-redis</artifactId> </dependency> - <!-- pool 瀵硅薄姹� --> <dependency> <groupId>org.apache.commons</groupId> @@ -109,7 +105,6 @@ <artifactId>mysql-connector-java</artifactId> <scope>runtime</scope> </dependency> - <!-- pagehelper 鍒嗛〉鎻掍欢 --> <dependency> <groupId>com.github.pagehelper</groupId> @@ -125,10 +120,10 @@ <!--闃块噷鏁版嵁搴撹繛鎺ユ睜 --> <dependency> - <groupId>com.alibaba</groupId> - <artifactId>druid-spring-boot-starter</artifactId> - <version>${druid.version}</version> - </dependency> + <groupId>com.alibaba</groupId> + <artifactId>druid-spring-boot-starter</artifactId> + <version>${druid.version}</version> + </dependency> <!--甯哥敤宸ュ叿绫� --> <dependency> @@ -142,14 +137,12 @@ <artifactId>commons-io</artifactId> <version>${commons.io.version}</version> </dependency> - <!--鏂囦欢涓婁紶宸ュ叿绫� --> <dependency> <groupId>commons-fileupload</groupId> <artifactId>commons-fileupload</artifactId> <version>${commons.fileupload.version}</version> </dependency> - <!-- 瑙f瀽瀹㈡埛绔搷浣滅郴缁熴�佹祻瑙堝櫒绛� --> <dependency> <groupId>eu.bitwalker</groupId> @@ -169,68 +162,59 @@ <groupId>org.springframework</groupId> <artifactId>spring-context-support</artifactId> </dependency> - - <!--Token鐢熸垚涓庤В鏋�--> + <!--Token鐢熸垚涓庤В鏋�--> <dependency> <groupId>io.jsonwebtoken</groupId> <artifactId>jjwt</artifactId> <version>${jwt.version}</version> </dependency> - <!-- swagger2--> <dependency> <groupId>io.springfox</groupId> <artifactId>springfox-swagger2</artifactId> <version>${swagger.version}</version> <exclusions> - <exclusion> - <groupId>io.swagger</groupId> - <artifactId>swagger-annotations</artifactId> - </exclusion> - <exclusion> - <groupId>io.swagger</groupId> - <artifactId>swagger-models</artifactId> - </exclusion> + <exclusion> + <groupId>io.swagger</groupId> + <artifactId>swagger-annotations</artifactId> + </exclusion> + <exclusion> + <groupId>io.swagger</groupId> + <artifactId>swagger-models</artifactId> + </exclusion> </exclusions> </dependency> - <!--闃叉杩涘叆swagger椤甸潰鎶ョ被鍨嬭浆鎹㈤敊璇紝鎺掗櫎2.9.2涓殑寮曠敤锛屾墜鍔ㄥ鍔�1.5.21鐗堟湰--> - <dependency> - <groupId>io.swagger</groupId> - <artifactId>swagger-annotations</artifactId> - <version>1.5.21</version> - </dependency> - - <dependency> - <groupId>io.swagger</groupId> - <artifactId>swagger-models</artifactId> - <version>1.5.21</version> - </dependency> - + <dependency> + <groupId>io.swagger</groupId> + <artifactId>swagger-annotations</artifactId> + <version>1.5.21</version> + </dependency> + <dependency> + <groupId>io.swagger</groupId> + <artifactId>swagger-models</artifactId> + <version>1.5.21</version> + </dependency> <!-- swagger2-UI--> <dependency> <groupId>io.springfox</groupId> <artifactId>springfox-swagger-ui</artifactId> <version>${swagger.version}</version> </dependency> - - <!-- 鑾峰彇绯荤粺淇℃伅 --> + <!-- 鑾峰彇绯荤粺淇℃伅 --> <dependency> <groupId>com.github.oshi</groupId> <artifactId>oshi-core</artifactId> <version>${oshi.version}</version> </dependency> - <dependency> <groupId>net.java.dev.jna</groupId> <artifactId>jna</artifactId> </dependency> - <dependency> <groupId>net.java.dev.jna</groupId> <artifactId>jna-platform</artifactId> </dependency> - <!-- excel宸ュ叿 --> <dependency> <groupId>org.apache.poi</groupId> @@ -264,7 +248,7 @@ <artifactId>lombok</artifactId> </dependency> - <!-- 瀹氭椂浠诲姟 --> + <!-- 瀹氭椂浠诲姟 --> <dependency> <groupId>org.quartz-scheduler</groupId> <artifactId>quartz</artifactId> -- Gitblit v1.9.3