velocity剔除commons-collections版本，防止3.2.1版本的反序列化漏洞

RuoYi

2021-03-14 41fa57d778d2bdfdbe7aad0a8c999c6681a24061

velocity剔除commons-collections版本，防止3.2.1版本的反序列化漏洞

 pom.xml

@@ -142,6 +142,12 @@
                <groupId>org.apache.velocity</groupId>

                <artifactId>velocity</artifactId>

                <version>${velocity.version}</version>

                <exclusions>

                    <exclusion>

                        <groupId>commons-collections</groupId>

                        <artifactId>commons-collections</artifactId>

                    </exclusion>

                </exclusions>

            </dependency>



            <!-- JSON 解析器和生成器 -->


 ruoyi-common/ruoyi-common-core/src/main/java/com/ruoyi/common/core/web/controller/BaseController.java

@@ -3,12 +3,10 @@
import java.beans.PropertyEditorSupport;

import java.util.Date;

import java.util.List;



import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.springframework.web.bind.WebDataBinder;

import org.springframework.web.bind.annotation.InitBinder;



import com.github.pagehelper.PageHelper;

import com.github.pagehelper.PageInfo;

import com.ruoyi.common.core.constant.HttpStatus;

@@ -27,7 +25,7 @@
 */

public class BaseController

{

    protected final Logger logger = LoggerFactory.getLogger(BaseController.class);

    protected final Logger logger = LoggerFactory.getLogger(this.getClass());



    /**

     * 将前台传递过来的日期格式的字符串，自动转化为Date类型


 ruoyi-common/ruoyi-common-security/src/main/java/com/ruoyi/common/security/feign/FeignRequestInterceptor.java

@@ -2,7 +2,6 @@


import java.util.Map;

import javax.servlet.http.HttpServletRequest;



import com.ruoyi.common.core.utils.ip.IpUtils;

import org.springframework.stereotype.Component;

import com.ruoyi.common.core.constant.CacheConstants;

@@ -45,7 +44,6 @@


            // 配置客户端IP

            requestTemplate.header("X-Forwarded-For", IpUtils.getIpAddr(ServletUtils.getRequest()));



        }

    }

}