velocity剔除commons-collections版本，防止3.2.1版本的反序列化漏洞

4 years ago · e58bad1ae7
parent 27a3083e80
commit e58bad1ae7
1 changed files with 6 additions and 0 deletions
--- a/pom.xml
+++ b/pom.xml
@ -171,6 +171,12 @@
                <groupId>org.apache.velocity</groupId>
                <artifactId>velocity</artifactId>
                <version>${velocity.version}</version>
                <exclusions>
                    <exclusion>
                        <groupId>commons-collections</groupId>
                        <artifactId>commons-collections</artifactId>
                    </exclusion>
                </exclusions>
            </dependency>
            <!-- 阿里JSON解析器 -->