pom.xml 7.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <project xmlns="http://maven.apache.org/POM/4.0.0"
  3. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  4. xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  5. <parent>
  6. <artifactId>ruoyi</artifactId>
  7. <groupId>com.ruoyi</groupId>
  8. <version>3.8.7</version>
  9. </parent>
  10. <modelVersion>4.0.0</modelVersion>
  11. <artifactId>ruoyi-common</artifactId>
  12. <description>
  13. common通用工具
  14. </description>
  15. <dependencies>
  16. <!-- swagger3 -->
  17. <dependency>
  18. <groupId>io.springfox</groupId>
  19. <artifactId>springfox-boot-starter</artifactId>
  20. </dependency>
  21. <!-- 防止进入swagger页面报类型转换错误,排除3.0.0中的引用,手动增加1.6.2版本 -->
  22. <dependency>
  23. <groupId>io.swagger</groupId>
  24. <artifactId>swagger-models</artifactId>
  25. <version>1.6.2</version>
  26. </dependency>
  27. <!-- mybatis plus-->
  28. <dependency>
  29. <groupId>com.baomidou</groupId>
  30. <artifactId>mybatis-plus-boot-starter</artifactId>
  31. <version>3.5.1</version>
  32. </dependency>
  33. <!-- Spring框架基本的核心工具 -->
  34. <dependency>
  35. <groupId>org.springframework</groupId>
  36. <artifactId>spring-context-support</artifactId>
  37. </dependency>
  38. <!-- SpringWeb模块 -->
  39. <dependency>
  40. <groupId>org.springframework</groupId>
  41. <artifactId>spring-web</artifactId>
  42. </dependency>
  43. <!--
  44. Spring Boot 2.5.15的内置版本
  45. <spring-security.version>5.5.8</spring-security.version>
  46. 强制修改依赖版本为:5.7.12
  47. 存在漏洞的JAR包:spring-security-core-5.5.8.jar
  48. 漏洞说明:Spring Security存在安全漏洞,在处理Authentication参数时没有对null值进行检查。当应用程序直接使用AuthenticatedVoter#vote方法,传入null作为认证参数时会错误地返回true值。攻击者可利用该漏洞绕过身份验证,进行提权或窃取系统敏感信息。
  49. 安全版本: Spring Security 5.7.12、5.8.11、6.0.10、6.1.8、6.2.3 及以上版本,下载地址:https://github.com/spring-projects/spring-security/releases
  50. -->
  51. <!-- spring security 安全认证-->
  52. <dependency>
  53. <groupId>org.springframework.boot</groupId>
  54. <artifactId>spring-boot-starter-security</artifactId>
  55. <version>2.5.15</version>
  56. <exclusions>
  57. <exclusion>
  58. <groupId>org.springframework.security</groupId>
  59. <artifactId>spring-security-config</artifactId>
  60. </exclusion>
  61. <exclusion>
  62. <groupId>org.springframework.security</groupId>
  63. <artifactId>spring-security-core</artifactId>
  64. </exclusion>
  65. <exclusion>
  66. <groupId>org.springframework.security</groupId>
  67. <artifactId>spring-security-crypto</artifactId>
  68. </exclusion>
  69. <exclusion>
  70. <groupId>org.springframework.security</groupId>
  71. <artifactId>spring-security-web</artifactId>
  72. </exclusion>
  73. </exclusions>
  74. </dependency>
  75. <dependency>
  76. <groupId>org.springframework.security</groupId>
  77. <artifactId>spring-security-config</artifactId>
  78. <version>5.7.12</version>
  79. <scope>compile</scope>
  80. </dependency>
  81. <dependency>
  82. <groupId>org.springframework.security</groupId>
  83. <artifactId>spring-security-core</artifactId>
  84. <version>5.7.12</version>
  85. <scope>compile</scope>
  86. </dependency>
  87. <dependency>
  88. <groupId>org.springframework.security</groupId>
  89. <artifactId>spring-security-crypto</artifactId>
  90. <version>5.7.12</version>
  91. <scope>compile</scope>
  92. </dependency>
  93. <dependency>
  94. <groupId>org.springframework.security</groupId>
  95. <artifactId>spring-security-web</artifactId>
  96. <version>5.7.12</version>
  97. <scope>compile</scope>
  98. </dependency>
  99. <!-- pagehelper 分页插件 -->
  100. <dependency>
  101. <groupId>com.github.pagehelper</groupId>
  102. <artifactId>pagehelper-spring-boot-starter</artifactId>
  103. </dependency>
  104. <!-- 自定义验证注解 -->
  105. <dependency>
  106. <groupId>org.springframework.boot</groupId>
  107. <artifactId>spring-boot-starter-validation</artifactId>
  108. </dependency>
  109. <!--常用工具类 -->
  110. <dependency>
  111. <groupId>org.apache.commons</groupId>
  112. <artifactId>commons-lang3</artifactId>
  113. </dependency>
  114. <!-- JSON工具类 -->
  115. <dependency>
  116. <groupId>com.fasterxml.jackson.core</groupId>
  117. <artifactId>jackson-databind</artifactId>
  118. <!--<version>2.15.2</version>
  119. <version>2.13.1</version>
  120. -->
  121. </dependency>
  122. <!-- 动态数据源 -->
  123. <dependency>
  124. <groupId>com.baomidou</groupId>
  125. <artifactId>dynamic-datasource-spring-boot-starter</artifactId>
  126. <version>3.5.2</version>
  127. </dependency>
  128. <!-- 阿里JSON解析器 -->
  129. <dependency>
  130. <groupId>com.alibaba.fastjson2</groupId>
  131. <artifactId>fastjson2</artifactId>
  132. </dependency>
  133. <!-- io常用工具类 -->
  134. <dependency>
  135. <groupId>commons-io</groupId>
  136. <artifactId>commons-io</artifactId>
  137. </dependency>
  138. <!-- excel工具 -->
  139. <dependency>
  140. <groupId>org.apache.poi</groupId>
  141. <artifactId>poi-ooxml</artifactId>
  142. </dependency>
  143. <!--
  144. yml解析器
  145. 漏洞修复,安全版本2.0及以上:https://mvnrepository.com/artifact/org.yaml/snakeyaml
  146. -->
  147. <dependency>
  148. <groupId>org.yaml</groupId>
  149. <artifactId>snakeyaml</artifactId>
  150. <version>2.0</version>
  151. <!--<snakeyaml.version>2.0</snakeyaml.version>-->
  152. </dependency>
  153. <!-- Token生成与解析-->
  154. <dependency>
  155. <groupId>io.jsonwebtoken</groupId>
  156. <artifactId>jjwt</artifactId>
  157. </dependency>
  158. <!-- Jaxb -->
  159. <dependency>
  160. <groupId>javax.xml.bind</groupId>
  161. <artifactId>jaxb-api</artifactId>
  162. </dependency>
  163. <!-- redis 缓存操作 -->
  164. <dependency>
  165. <groupId>org.springframework.boot</groupId>
  166. <artifactId>spring-boot-starter-data-redis</artifactId>
  167. </dependency>
  168. <!-- pool 对象池 -->
  169. <dependency>
  170. <groupId>org.apache.commons</groupId>
  171. <artifactId>commons-pool2</artifactId>
  172. </dependency>
  173. <!-- 解析客户端操作系统、浏览器等 -->
  174. <dependency>
  175. <groupId>eu.bitwalker</groupId>
  176. <artifactId>UserAgentUtils</artifactId>
  177. </dependency>
  178. <!-- servlet包 -->
  179. <dependency>
  180. <groupId>javax.servlet</groupId>
  181. <artifactId>javax.servlet-api</artifactId>
  182. </dependency>
  183. <!--lombok表达式自动生成 Get Set方法-->
  184. <dependency>
  185. <groupId>org.projectlombok</groupId>
  186. <artifactId>lombok</artifactId>
  187. </dependency>
  188. <!--
  189. 甲方工业互联网平台CAS依赖包
  190. -->
  191. <dependency>
  192. <groupId>net.unicon.cas</groupId>
  193. <artifactId>cas-client-autoconfig-support</artifactId>
  194. <version>2.0.0-GA</version>
  195. </dependency>
  196. <dependency>
  197. <groupId>org.springframework</groupId>
  198. <artifactId>spring-webmvc</artifactId>
  199. </dependency>
  200. </dependencies>
  201. </project>