pom文件调整 log4j漏洞版本替换

This commit is contained in:
liuyu 2024-03-08 00:01:35 +08:00
parent 73d923bb64
commit d24f364cbb
3 changed files with 115 additions and 99 deletions

200
pom.xml
View File

@ -1,99 +1,113 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"> xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion> <modelVersion>4.0.0</modelVersion>
<parent> <parent>
<groupId>org.springframework.boot</groupId> <groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId> <artifactId>spring-boot-starter-parent</artifactId>
<version>3.1.4</version> <version>3.1.4</version>
<relativePath/> <!-- lookup parent from repository --> <relativePath/> <!-- lookup parent from repository -->
</parent> </parent>
<groupId>com.as</groupId> <groupId>com.as</groupId>
<artifactId>project</artifactId> <artifactId>project</artifactId>
<version>0.0.1-SNAPSHOT</version> <version>0.0.1-SNAPSHOT</version>
<name>as_project</name> <name>as_project</name>
<description>Demo project for Spring Boot</description> <description>Demo project for Spring Boot</description>
<properties> <properties>
<java.version>17</java.version> <java.version>17</java.version>
</properties> <spring-boot.version>2.6.3</spring-boot.version>
<dependencies> <log4j.version>2.17.0</log4j.version>
<dependency> </properties>
<groupId>org.springframework.boot</groupId> <dependencies>
<artifactId>spring-boot-starter-web</artifactId> <dependency>
</dependency> <groupId>org.springframework.boot</groupId>
<dependency> <artifactId>spring-boot-starter-web</artifactId>
<groupId>org.apache.shiro</groupId> </dependency>
<artifactId>shiro-core</artifactId> <dependency>
<version>1.4.1</version> <groupId>org.apache.shiro</groupId>
</dependency> <artifactId>shiro-core</artifactId>
<dependency> <version>1.7.1</version>
<groupId>com.baomidou</groupId> </dependency>
<artifactId>mybatis-plus-boot-starter</artifactId> <dependency>
<version>3.5.5</version> <groupId>com.baomidou</groupId>
</dependency> <artifactId>mybatis-plus-boot-starter</artifactId>
<dependency> <version>3.5.5</version>
<groupId>org.mybatis.spring.boot</groupId> </dependency>
<artifactId>mybatis-spring-boot-starter</artifactId> <dependency>
<version>3.0.2</version> <groupId>org.mybatis.spring.boot</groupId>
</dependency> <artifactId>mybatis-spring-boot-starter</artifactId>
<dependency> <version>3.0.2</version>
<groupId>org.mybatis</groupId> </dependency>
<artifactId>mybatis-spring</artifactId> <dependency>
<version>3.0.2</version> <groupId>org.mybatis</groupId>
</dependency> <artifactId>mybatis-spring</artifactId>
<version>3.0.2</version>
</dependency>
<dependency> <dependency>
<groupId>org.slf4j</groupId> <groupId>org.slf4j</groupId>
<artifactId>jcl-over-slf4j</artifactId> <artifactId>jcl-over-slf4j</artifactId>
<version>1.7.21</version> <version>1.7.21</version>
</dependency> </dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-log4j12</artifactId>
<version>1.7.21</version>
</dependency>
<dependency>
<groupId>log4j</groupId>
<artifactId>log4j</artifactId>
<version>1.2.17</version>
</dependency>
<dependency>
<groupId>com.mysql</groupId>
<artifactId>mysql-connector-j</artifactId>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.projectlombok</groupId>
<artifactId>lombok</artifactId>
<optional>true</optional>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-jdbc</artifactId>
</dependency>
</dependencies>
<build> <dependency>
<plugins> <groupId>org.apache.logging.log4j</groupId>
<plugin> <artifactId>log4j-api</artifactId>
<groupId>org.springframework.boot</groupId> <version>2.14.1</version>
<artifactId>spring-boot-maven-plugin</artifactId> </dependency>
<configuration> <dependency>
<excludes> <groupId>org.apache.logging.log4j</groupId>
<exclude> <artifactId>log4j-core</artifactId>
<groupId>org.projectlombok</groupId> <version>2.14.1</version>
<artifactId>lombok</artifactId> </dependency>
</exclude>
</excludes> <dependency>
</configuration> <groupId>com.mysql</groupId>
</plugin> <artifactId>mysql-connector-j</artifactId>
</plugins> <scope>runtime</scope>
</build> </dependency>
<dependency>
<groupId>org.projectlombok</groupId>
<artifactId>lombok</artifactId>
<optional>true</optional>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-jdbc</artifactId>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
<version>${spring-boot.version}</version>
<configuration>
<excludes>
<exclude>
<groupId>org.projectlombok</groupId>
<artifactId>lombok</artifactId>
</exclude>
</excludes>
</configuration>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
<!-- <version>3.8.1</version>-->
<configuration>
<source>${java.version}</source>
<target>${java.version}</target>
</configuration>
</plugin>
</plugins>
</build>
</project> </project>

View File

@ -2,10 +2,9 @@ package com.as.controller;
import java.util.List; import java.util.List;
import org.apache.log4j.Logger; import org.apache.logging.log4j.LogManager;
import org.mybatis.spring.annotation.MapperScan; import org.apache.logging.log4j.Logger;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.RequestBody; import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.bind.annotation.RequestMethod;
@ -20,7 +19,8 @@ import com.as.dao.UserData;
public class userContorller { public class userContorller {
@Autowired @Autowired
UserService impl; UserService impl;
private static Logger logger = Logger.getLogger(userContorller.class); private static final Logger logger = LogManager.getLogger(userContorller.class);
@RequestMapping(value="/getAllUser", method=RequestMethod.POST) @RequestMapping(value="/getAllUser", method=RequestMethod.POST)
public requestJSON<List<UserData>> getUser(@RequestBody UserData data){ public requestJSON<List<UserData>> getUser(@RequestBody UserData data){
logger.info("进入getUser方法接收到数据data:" + data.toString()); logger.info("进入getUser方法接收到数据data:" + data.toString());

View File

@ -1,7 +1,8 @@
package com.as.service.impl; package com.as.service.impl;
import java.util.List; import java.util.List;
import org.apache.log4j.Logger; import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service; import org.springframework.stereotype.Service;
@ -16,7 +17,8 @@ import com.as.dao.UserData;
import com.as.mapper.UserMapper; import com.as.mapper.UserMapper;
@Service @Service
public class UserServiceImpl implements UserService{ public class UserServiceImpl implements UserService{
private static Logger logger = Logger.getLogger(UserServiceImpl.class); private static final Logger logger = LogManager.getLogger(UserServiceImpl.class);
@Autowired @Autowired
private UserMapper mapper; private UserMapper mapper;
@Override @Override