velocity剔除commons-collections版本,防止3.2.1版本的反序列化漏洞
This commit is contained in:
6
pom.xml
6
pom.xml
@ -171,6 +171,12 @@
|
||||
<groupId>org.apache.velocity</groupId>
|
||||
<artifactId>velocity</artifactId>
|
||||
<version>${velocity.version}</version>
|
||||
<exclusions>
|
||||
<exclusion>
|
||||
<groupId>commons-collections</groupId>
|
||||
<artifactId>commons-collections</artifactId>
|
||||
</exclusion>
|
||||
</exclusions>
|
||||
</dependency>
|
||||
|
||||
<!-- 阿里JSON解析器 -->
|
||||
|
Reference in New Issue
Block a user