velocity剔除commons-collections版本，防止3.2.1版本的反序列化漏洞

RuoYi

2021-03-14 41fa57d778d2bdfdbe7aad0a8c999c6681a24061

 ruoyi-common/ruoyi-common-security/src/main/java/com/ruoyi/common/security/feign/FeignRequestInterceptor.java

@@ -2,6 +2,7 @@


import java.util.Map;

import javax.servlet.http.HttpServletRequest;

import com.ruoyi.common.core.utils.ip.IpUtils;

import org.springframework.stereotype.Component;

import com.ruoyi.common.core.constant.CacheConstants;

import com.ruoyi.common.core.utils.ServletUtils;

@@ -35,6 +36,14 @@
            {

                requestTemplate.header(CacheConstants.DETAILS_USERNAME, userName);

            }

            String authentication = headers.get(CacheConstants.AUTHORIZATION_HEADER);

            if (StringUtils.isNotEmpty(authentication))

            {

                requestTemplate.header(CacheConstants.AUTHORIZATION_HEADER, authentication);

            }



            // 配置客户端IP

            requestTemplate.header("X-Forwarded-For", IpUtils.getIpAddr(ServletUtils.getRequest()));

        }

    }

}