pom.xml 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <project xmlns="http://maven.apache.org/POM/4.0.0"
  3. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  4. xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  5. <modelVersion>4.0.0</modelVersion>
  6. <groupId>com.eitc</groupId>
  7. <artifactId>eitc</artifactId>
  8. <version>3.8.7</version>
  9. <name>eitc</name>
  10. <description>牙科管理系统</description>
  11. <properties>
  12. <eitc.version>3.8.7</eitc.version>
  13. <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
  14. <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
  15. <java.version>1.8</java.version>
  16. <maven-jar-plugin.version>3.1.1</maven-jar-plugin.version>
  17. <spring-framework.version>5.3.33</spring-framework.version>
  18. <druid.version>1.2.20</druid.version>
  19. <bitwalker.version>1.21</bitwalker.version>
  20. <swagger.version>3.0.0</swagger.version>
  21. <kaptcha.version>2.3.3</kaptcha.version>
  22. <pagehelper.boot.version>1.4.7</pagehelper.boot.version>
  23. <fastjson.version>2.0.43</fastjson.version>
  24. <oshi.version>6.5.0</oshi.version>
  25. <commons.io.version>2.13.0</commons.io.version>
  26. <poi.version>4.1.2</poi.version>
  27. <velocity.version>2.3</velocity.version>
  28. <jwt.version>0.9.1</jwt.version>
  29. </properties>
  30. <!-- 依赖声明 -->
  31. <dependencyManagement>
  32. <dependencies>
  33. <!-- SpringFramework的依赖配置-->
  34. <dependency>
  35. <groupId>org.springframework</groupId>
  36. <artifactId>spring-framework-bom</artifactId>
  37. <version>${spring-framework.version}</version>
  38. <type>pom</type>
  39. <scope>import</scope>
  40. </dependency>
  41. <!-- https://mvnrepository.com/artifact/com.itextpdf/html2pdf -->
  42. <dependency>
  43. <groupId>com.itextpdf</groupId>
  44. <artifactId>html2pdf</artifactId>
  45. <version>4.0.5</version>
  46. </dependency>
  47. <!-- SpringBoot的依赖配置-->
  48. <dependency>
  49. <groupId>org.springframework.boot</groupId>
  50. <artifactId>spring-boot-dependencies</artifactId>
  51. <version>2.5.15</version>
  52. <type>pom</type>
  53. <scope>import</scope>
  54. </dependency>
  55. <!--
  56. Spring Boot 2.5.15的内置版本
  57. <spring-security.version>5.5.8</spring-security.version>
  58. 强制修改依赖版本为:5.7.12
  59. 存在漏洞的JAR包:spring-security-core-5.5.8.jar
  60. 漏洞说明:Spring Security存在安全漏洞,在处理Authentication参数时没有对null值进行检查。当应用程序直接使用AuthenticatedVoter#vote方法,传入null作为认证参数时会错误地返回true值。攻击者可利用该漏洞绕过身份验证,进行提权或窃取系统敏感信息。
  61. 安全版本: Spring Security 5.7.12、5.8.11、6.0.10、6.1.8、6.2.3 及以上版本,下载地址:https://github.com/spring-projects/spring-security/releases
  62. <spring-security.version>5.7.12</spring-security.version>
  63. 注意:因为使用Maven管理依赖,MAVEN具有依赖传递的特性,实质上只需要引入spring-security-config依赖包含了spring-security-core依赖和spring-security-web依赖
  64. -->
  65. <!-- spring-security 漏洞升级 -->
  66. <dependency>
  67. <groupId>org.springframework.security</groupId>
  68. <artifactId>spring-security-config</artifactId>
  69. <version>5.7.12</version>
  70. <scope>compile</scope>
  71. </dependency>
  72. <dependency>
  73. <groupId>org.springframework.security</groupId>
  74. <artifactId>spring-security-core</artifactId>
  75. <version>5.7.12</version>
  76. <scope>compile</scope>
  77. </dependency>
  78. <dependency>
  79. <groupId>org.springframework.security</groupId>
  80. <artifactId>spring-security-crypto</artifactId>
  81. <version>5.7.12</version>
  82. <scope>compile</scope>
  83. </dependency>
  84. <dependency>
  85. <groupId>org.springframework.security</groupId>
  86. <artifactId>spring-security-web</artifactId>
  87. <version>5.7.12</version>
  88. <scope>compile</scope>
  89. </dependency>
  90. <dependency>
  91. <groupId>org.quartz-scheduler</groupId>
  92. <artifactId>quartz</artifactId>
  93. <version>2.4.0-rc2</version>
  94. <exclusions>
  95. <exclusion>
  96. <groupId>com.mchange</groupId>
  97. <artifactId>c3p0</artifactId>
  98. </exclusion>
  99. </exclusions>
  100. </dependency>
  101. <!-- 阿里数据库连接池 -->
  102. <dependency>
  103. <groupId>com.alibaba</groupId>
  104. <artifactId>druid-spring-boot-starter</artifactId>
  105. <version>${druid.version}</version>
  106. <exclusions>
  107. <exclusion>
  108. <groupId>org.yaml</groupId>
  109. <artifactId>snakeyaml</artifactId>
  110. </exclusion>
  111. </exclusions>
  112. </dependency>
  113. <!-- yml解析器 漏洞修复,安全版本2.0及以上:https://mvnrepository.com/artifact/org.yaml/snakeyaml-->
  114. <!-- 漏洞升级 -->
  115. <dependency>
  116. <groupId>org.yaml</groupId>
  117. <artifactId>snakeyaml</artifactId>
  118. <version>2.0</version>
  119. </dependency>
  120. <!-- 解析客户端操作系统、浏览器等 -->
  121. <dependency>
  122. <groupId>eu.bitwalker</groupId>
  123. <artifactId>UserAgentUtils</artifactId>
  124. <version>${bitwalker.version}</version>
  125. </dependency>
  126. <!-- pagehelper 分页插件 -->
  127. <dependency>
  128. <groupId>com.github.pagehelper</groupId>
  129. <artifactId>pagehelper-spring-boot-starter</artifactId>
  130. <version>${pagehelper.boot.version}</version>
  131. </dependency>
  132. <!-- 获取系统信息 -->
  133. <dependency>
  134. <groupId>com.github.oshi</groupId>
  135. <artifactId>oshi-core</artifactId>
  136. <version>${oshi.version}</version>
  137. </dependency>
  138. <!-- Swagger3依赖 -->
  139. <dependency>
  140. <groupId>io.springfox</groupId>
  141. <artifactId>springfox-boot-starter</artifactId>
  142. <version>${swagger.version}</version>
  143. <exclusions>
  144. <exclusion>
  145. <groupId>io.swagger</groupId>
  146. <artifactId>swagger-models</artifactId>
  147. </exclusion>
  148. </exclusions>
  149. </dependency>
  150. <!-- io常用工具类 -->
  151. <dependency>
  152. <groupId>commons-io</groupId>
  153. <artifactId>commons-io</artifactId>
  154. <version>${commons.io.version}</version>
  155. </dependency>
  156. <!-- excel工具 -->
  157. <dependency>
  158. <groupId>org.apache.poi</groupId>
  159. <artifactId>poi-ooxml</artifactId>
  160. <version>${poi.version}</version>
  161. </dependency>
  162. <!-- velocity代码生成使用模板 -->
  163. <dependency>
  164. <groupId>org.apache.velocity</groupId>
  165. <artifactId>velocity-engine-core</artifactId>
  166. <version>${velocity.version}</version>
  167. </dependency>
  168. <!-- 阿里JSON解析器 -->
  169. <dependency>
  170. <groupId>com.alibaba.fastjson2</groupId>
  171. <artifactId>fastjson2</artifactId>
  172. <version>${fastjson.version}</version>
  173. </dependency>
  174. <!-- Token生成与解析-->
  175. <dependency>
  176. <groupId>io.jsonwebtoken</groupId>
  177. <artifactId>jjwt</artifactId>
  178. <version>${jwt.version}</version>
  179. </dependency>
  180. <!-- 验证码 -->
  181. <dependency>
  182. <groupId>pro.fessional</groupId>
  183. <artifactId>kaptcha</artifactId>
  184. <version>${kaptcha.version}</version>
  185. </dependency>
  186. <!-- mybatis-plus 增强CRUD -->
  187. <dependency>
  188. <groupId>com.baomidou</groupId>
  189. <artifactId>mybatis-plus-boot-starter</artifactId>
  190. <version>3.5.1</version>
  191. </dependency>
  192. <dependency>
  193. <groupId>org.projectlombok</groupId>
  194. <artifactId>lombok</artifactId>
  195. <version>1.18.28</version>
  196. </dependency>
  197. <!-- 定时任务-->
  198. <dependency>
  199. <groupId>com.eitc</groupId>
  200. <artifactId>eitc-quartz</artifactId>
  201. <version>${eitc.version}</version>
  202. </dependency>
  203. <!-- 代码生成-->
  204. <dependency>
  205. <groupId>com.eitc</groupId>
  206. <artifactId>eitc-generator</artifactId>
  207. <version>${eitc.version}</version>
  208. </dependency>
  209. <!-- 核心模块-->
  210. <dependency>
  211. <groupId>com.eitc</groupId>
  212. <artifactId>eitc-framework</artifactId>
  213. <version>${eitc.version}</version>
  214. </dependency>
  215. <!-- 系统模块-->
  216. <dependency>
  217. <groupId>com.eitc</groupId>
  218. <artifactId>eitc-system</artifactId>
  219. <version>${eitc.version}</version>
  220. </dependency>
  221. <!-- 通用工具-->
  222. <dependency>
  223. <groupId>com.eitc</groupId>
  224. <artifactId>eitc-common</artifactId>
  225. <version>${eitc.version}</version>
  226. </dependency>
  227. <dependency>
  228. <groupId>com.eitc</groupId>
  229. <artifactId>eitc-patient-base</artifactId>
  230. <version>${eitc.version}</version>
  231. </dependency>
  232. <dependency>
  233. <groupId>com.eitc</groupId>
  234. <artifactId>eitc-patient-app</artifactId>
  235. <version>${eitc.version}</version>
  236. </dependency>
  237. <dependency>
  238. <groupId>com.eitc</groupId>
  239. <artifactId>eitc-patient-pc</artifactId>
  240. <version>${eitc.version}</version>
  241. </dependency>
  242. </dependencies>
  243. </dependencyManagement>
  244. <modules>
  245. <module>eitc-admin</module>
  246. <module>eitc-framework</module>
  247. <module>eitc-system</module>
  248. <module>eitc-quartz</module>
  249. <module>eitc-generator</module>
  250. <module>eitc-common</module>
  251. <module>eitc-patient-base</module>
  252. <module>eitc-patient-app</module>
  253. <module>eitc-patient-pc</module>
  254. </modules>
  255. <packaging>pom</packaging>
  256. <build>
  257. <plugins>
  258. <plugin>
  259. <groupId>org.apache.maven.plugins</groupId>
  260. <artifactId>maven-compiler-plugin</artifactId>
  261. <version>3.1</version>
  262. <configuration>
  263. <source>${java.version}</source>
  264. <target>${java.version}</target>
  265. <encoding>${project.build.sourceEncoding}</encoding>
  266. </configuration>
  267. </plugin>
  268. </plugins>
  269. </build>
  270. <repositories>
  271. <repository>
  272. <id>public</id>
  273. <name>aliyun nexus</name>
  274. <url>https://maven.aliyun.com/repository/public</url>
  275. <releases>
  276. <enabled>true</enabled>
  277. </releases>
  278. </repository>
  279. </repositories>
  280. <pluginRepositories>
  281. <pluginRepository>
  282. <id>public</id>
  283. <name>aliyun nexus</name>
  284. <url>https://maven.aliyun.com/repository/public</url>
  285. <releases>
  286. <enabled>true</enabled>
  287. </releases>
  288. <snapshots>
  289. <enabled>false</enabled>
  290. </snapshots>
  291. </pluginRepository>
  292. </pluginRepositories>
  293. </project>