升级thymeleaf到最新版3.0.14 阻止远程代码执行漏洞

pull/358/head
RuoYi 2021-12-22 09:27:15 +08:00
parent 22881ccb59
commit 07cc5dfa51
1 changed files with 15 additions and 1 deletions

16
pom.xml
View File

@ -18,6 +18,7 @@
<java.version>1.8</java.version>
<maven-jar-plugin.version>3.1.1</maven-jar-plugin.version>
<shiro.version>1.8.0</shiro.version>
<thymeleaf.version>3.0.14.RELEASE</thymeleaf.version>
<thymeleaf.extras.shiro.version>2.1.0</thymeleaf.extras.shiro.version>
<druid.version>1.2.8</druid.version>
<bitwalker.version>1.21</bitwalker.version>
@ -82,7 +83,20 @@
<artifactId>shiro-ehcache</artifactId>
<version>${shiro.version}</version>
</dependency>
<!-- thymeleaf模板引擎和spring框架的整合 -->
<dependency>
<groupId>org.thymeleaf</groupId>
<artifactId>thymeleaf-spring5</artifactId>
<version>${thymeleaf.version}</version>
</dependency>
<dependency>
<groupId>org.thymeleaf</groupId>
<artifactId>thymeleaf</artifactId>
<version>${thymeleaf.version}</version>
</dependency>
<!-- thymeleaf模板引擎和shiro框架的整合 -->
<dependency>
<groupId>com.github.theborakompanioni</groupId>